Trojan.Necurs.A

Trojan.Necurs.A Description

Trojan.Necurs.A is a Trojan that encompasses malware dropper, rootkit and backdoor capabilities. Trojan.Necurs.A makes use of rootkit techniques, and, thus, once installed can add a subkey into to the Windows Registry, which allows it to start automatically whenever you boot your Windows. Trojan.Necurs.A runs surreptitiously in the system background, bypassing the detection of anti-malware applications, and it makes it hard to eliminate it. Trojan.Necurs.A proliferates via unsafe web pages and enters the compromised PC without a victim's consent and awareness. After installation, Trojan.Necurs.A downloads a list of six web addresses. Trojan.Necurs.A tries to connect to these websites over the network without your authorization once the Trojan infiltrates into the computer system. Once the connection is generated, Trojan.Necurs.A uses an HTTP protocol to download a file from one of these addresses and then launch it. Trojan.Necurs.A can also downloads and install extra malware threats. Trojan.Necurs.A disables security applications, so that it would not be found and deleted. Trojan.Necurs.A is able to randomly restart your computer system, as a result, losing all the unsaved information.
Aliases: Trojan.GenericKDV.948459 [MicroWorld-eScan], Trj/Dtcontx.D [Panda], PWS-Zbot-FASG!23C68A52087F [McAfee], Troj_Generic.KIYRA [Norman], TROJ_SPNR.14DQ13 [TrendMicro-HouseCall], Trojan-Dropper.Win32.Necurs.pfa [Kaspersky], TR/Symmi.18765 [AntiVir], Mal/Generic-S [Sophos], a variant of Win32/Kryptik.AYQT [ESET-NOD32], W32/Kryptik.AYQT [Fortinet], Generic32.BSSV [AVG], Trojan.Dropper.frkt [Malwarebytes], TROJ_GEN.F47V0419 [TrendMicro-HouseCall], Trojan-Dropper.Win32.Necurs.pfc [Kaspersky] and TR/Crypt.ZPACK.Gen [AntiVir].

Infected with Trojan.Necurs.A? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Trojan.Necurs.A

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Trojan.Necurs.A outbreaks and other threats from global to local level.

File System Details

Trojan.Necurs.A creates the following file(s):
# File Name Size MD5 Detection Count
1 %WINDIR%\Installer\{86F35560-0437-14ED-0C10-ADBAEBEF0A37}\syshost.exe 110,147 ab3f9e17adfe20312d194ed4d6ce33fd 139
2 %WINDIR%\system32\drivers\2479e.sys 43,008 ed8a2b1018f0b3e846b088b7bbe51585 82
3 %WINDIR%\system32\drivers\662f2.sys 58,112 4e760d8f966a1d9f3bbe4afeb336e9da 73
4 %WINDIR%\System32\drivers\86dadcaae13b6bc6.sys 59,136 279e87cc664b6e77c05560e45ef517f1 51
5 %WINDIR%\System32\drivers\61a57491bc0649b8.sys 46,264 8c55911cde8dd5c45e6be123f6ceaca1 45
6 %WINDIR%\system32\drivers\5071c.sys 69,192 8f9ebee084f45c6b7378ea9c3bbbcea5 36
7 %TEMP%\0.3826909899607682.exe 321,024 1d81e09b7dbc01068d3572ac9eb2f512 33
8 %WINDIR%\System32\drivers\6ef24294c953172f.sys 69,888 72a6c1fd16ed06bb7b1474de33b78a49 20
9 C:\Games Files\MSTS\NewRoads_V40_MSTS1_Setup.exe 18,194,419 fe6029c6dd77e373e51568c8c78b650e 19
10 %WINDIR%\System32\drivers\e9ed568f444e0f0f.sys 63,104 45965a29086a6943c08951dc7061eeab 7
11 %WINDIR%\System32\drivers\22a2a5937d037a2b.sys 70,656 075f1f21fd1dcf6c7f1144cc2e9fe3b6 5
12 %WINDIR%\System32\drivers\a657181eb7ee61.sys 71,496 87a6954ec6a20cb2c6d590dbf2d18f2d 3
13 %USERPROFILE%\Bureau\installer.exe 801,699 4250135cb2e36bbc0fd16953d8dd5b51 3
14 %APPDATA%\Blammi\blammi.exe 749,568 6c7bfaf7d9a4cdfffbe4d402c7001e56 2
15 %WINDIR%\System32\drivers\7a513dead4b2135e.sys 67,544 f528a809992ea627e670e5c8d1c8fdff 1
16 edsmgr.exe N/A
17 121ecb4.sys N/A
18 Recycle.Bin.exe N/A
19 41fb2af0cd745ae6.exe N/A

More files

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 10 + 12 ?