Troj/Agent-NNZ is a Trojan for the Windows platform.
Troj/Agent-NNZ includes functionality to run automatically.
When first run Troj/Agent-NNZ copies itself to <System>\raid64.exe.
The following registry entries are created to run raid64.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
System RAID Manager
<System>\raid64.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
System RAID Manager
<System>\raid64.exe
Troj/Agent-NNZ deletese safe mode boot settings from the registry.