Trojan.Necurs.A

By Domesticus in Trojans

Translate To:

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	988

First Seen:	September 30, 2011
Last Seen:	March 9, 2024
OS(es) Affected:	Windows

Trojan.Necurs.A is a Trojan that encompasses malware dropper, rootkit and backdoor capabilities. Trojan.Necurs.A makes use of rootkit techniques, and, thus, once installed can add a subkey into to the Windows Registry, which allows it to start automatically whenever you boot your Windows. Trojan.Necurs.A runs surreptitiously in the system background, bypassing the detection of anti-malware applications, and it makes it hard to eliminate it. Trojan.Necurs.A proliferates via unsafe web pages and enters the compromised PC without a victim's consent and awareness.

After installation, Trojan.Necurs.A downloads a list of six web addresses. Trojan.Necurs.A tries to connect to these websites over the network without your authorization once the Trojan infiltrates into the computer system. Once the connection is generated, Trojan.Necurs.A uses an HTTP protocol to download a file from one of these addresses and then launch it. Trojan.Necurs.A can also downloads and install extra malware threats. Trojan.Necurs.A disables security applications, so that it would not be found and deleted. Trojan.Necurs.A is able to randomly restart your computer system, as a result, losing all the unsaved information.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Trj/Dtcontx.D
AVG	Generic32.BSSV
Fortinet	W32/Kryptik.AYQT
Sophos	Mal/Generic-S
AntiVir	TR/Symmi.18765
Kaspersky	Trojan-Dropper.Win32.Necurs.pfa
McAfee	PWS-Zbot-FASG!23C68A52087F
AVG	Dropper.Generic8.WEG
AntiVir	TR/Crypt.ZPACK.Gen
Kaspersky	Trojan-Dropper.Win32.Necurs.pfc
AVG	BackDoor.Generic15.CMMC
AhnLab-V3	Win-Trojan/Necurs.59776
Comodo	TrojWare.Win32.UMal.~A
Sophos	Troj/Necurs-M
Kaspersky	Rootkit.Win32.Necurs.he

SpyHunter Detects & Remove Trojan.Necurs.A

File System Details

Trojan.Necurs.A may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	syshost.exe	c6139282423971fd961a99fd48cfd635	84
Name: syshost.exe MD5: c6139282423971fd961a99fd48cfd635 Size: 92.75 KB (92753 bytes) Detections: 84 Type: Executable File Path: %WINDIR%\Installer\{5B53ECA5-8044-9EDF-9AEC-21897AD44412} Group: Malware file Last Updated: September 15, 2020
2.	syshost.exe	cd4934ee00ecd68a87e684ffac2a3819	67
Name: syshost.exe MD5: cd4934ee00ecd68a87e684ffac2a3819 Size: 86.01 KB (86016 bytes) Detections: 67 Type: Executable File Path: %WINDIR%\Installer\{C51CD8C5-072C-DB07-4048-5A052023D288} Group: Malware file Last Updated: December 17, 2012
3.	syshost.exe	4d03b81a2409097c1ea703d39cc4ff58	35
Name: syshost.exe MD5: 4d03b81a2409097c1ea703d39cc4ff58 Size: 94.72 KB (94720 bytes) Detections: 35 Type: Executable File Path: %LOCALAPPDATA%\{7F7804DC-CF9B-163F-9DBF-89127C254777} Group: Malware file Last Updated: November 27, 2012
4.	syshost.exe	23c68a52087f53e7ddcf8d3e216f4575	24
Name: syshost.exe MD5: 23c68a52087f53e7ddcf8d3e216f4575 Size: 59.39 KB (59392 bytes) Detections: 24 Type: Executable File Path: %LOCALAPPDATA%\{1D9B21C7-E492-A47B-D6D2-2891B56055AF} Group: Malware file Last Updated: May 3, 2013
5.	syshost.exe	4b2007c8630d9772a362e8bce899feed	23
Name: syshost.exe MD5: 4b2007c8630d9772a362e8bce899feed Size: 92.75 KB (92755 bytes) Detections: 23 Type: Executable File Path: %LOCALAPPDATA%\{A050A9C8-3F85-BBDB-FA3A-C398DA1BAE58} Group: Malware file Last Updated: November 19, 2012
6.	syshost.exe	1e18990138c5b36fbab93508a35ba3d9	12
Name: syshost.exe MD5: 1e18990138c5b36fbab93508a35ba3d9 Size: 344.06 KB (344064 bytes) Detections: 12 Type: Executable File Path: %WINDIR%\Installer\{15CEC7CB-5985-C264-5E1F-D23C3DB00964} Group: Malware file Last Updated: December 17, 2012
7.	syshost.exe	f08d40789dfd5348c6171bd1b682c3d2	8
Name: syshost.exe MD5: f08d40789dfd5348c6171bd1b682c3d2 Size: 59.39 KB (59392 bytes) Detections: 8 Type: Executable File Path: %WINDIR%\Installer\{76CD3219-4601-63C5-A651-E4BA85FE5848} Group: Malware file Last Updated: January 14, 2013
8.	syshost.exe	4e8740f7d4a63780b793ff329aa06dbb	7
Name: syshost.exe MD5: 4e8740f7d4a63780b793ff329aa06dbb Size: 78.33 KB (78336 bytes) Detections: 7 Type: Executable File Path: %LOCALAPPDATA%\{E31AC82A-97D2-7521-5783-7E8936990836} Group: Malware file Last Updated: December 17, 2012
9.	e9ed568f444e0f0f.sys	45965a29086a6943c08951dc7061eeab	7
Name: e9ed568f444e0f0f.sys MD5: 45965a29086a6943c08951dc7061eeab Size: 63.1 KB (63104 bytes) Detections: 7 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 20, 2012
10.	syshost.exe	72558c18808bfb177a97edb89579ea33	7
Name: syshost.exe MD5: 72558c18808bfb177a97edb89579ea33 Size: 131.07 KB (131072 bytes) Detections: 7 Type: Executable File Path: %LOCALAPPDATA%\{330BEB4C-647F-B2DB-0D7C-303EEB1C799F} Group: Malware file Last Updated: January 21, 2013
11.	syshost.exe	c6c3a661c2779ded186bdfa3658c8f04	6
Name: syshost.exe MD5: c6c3a661c2779ded186bdfa3658c8f04 Size: 77.31 KB (77312 bytes) Detections: 6 Type: Executable File Path: %WINDIR%\Installer\{062A2300-D3A5-0D35-ED70-C27DCD5888B6} Group: Malware file Last Updated: December 27, 2012
12.	syshost.exe	d74e19ec9a2e15dcb729ce0d9e80f0b5	6
Name: syshost.exe MD5: d74e19ec9a2e15dcb729ce0d9e80f0b5 Size: 131.07 KB (131072 bytes) Detections: 6 Type: Executable File Path: %WINDIR%\Installer\{3CEBE55F-F9BA-6F1D-8B8D-A00E6B413EA2} Group: Malware file Last Updated: January 21, 2013
13.	syshost.exe	7063a79e9065bdb51072478eca7a470c	6
Name: syshost.exe MD5: 7063a79e9065bdb51072478eca7a470c Size: 58.88 KB (58880 bytes) Detections: 6 Type: Executable File Path: %LOCALAPPDATA%\{B88B43D0-D723-2B15-73EF-722253A721E6} Group: Malware file Last Updated: April 22, 2013
14.	syshost.exe	e83db43e34e255827142a4cbfbdaaed3	5
Name: syshost.exe MD5: e83db43e34e255827142a4cbfbdaaed3 Size: 77.31 KB (77312 bytes) Detections: 5 Type: Executable File Path: %LOCALAPPDATA%\{91C516BA-3E3F-EF98-5FDD-906B3F98D601} Group: Malware file Last Updated: December 24, 2012
15.	syshost.exe	99ac1d4016006c620f39831f8cac1d4c	5
Name: syshost.exe MD5: 99ac1d4016006c620f39831f8cac1d4c Size: 131.07 KB (131072 bytes) Detections: 5 Type: Executable File Path: %WINDIR%\Installer\{98604526-2F19-C0D3-EE76-A3E9CDD37BB6} Group: Malware file Last Updated: January 21, 2013
16.	syshost.exe	b382cffc99c8b706753443baf35fc3c8	4
Name: syshost.exe MD5: b382cffc99c8b706753443baf35fc3c8 Size: 339.96 KB (339968 bytes) Detections: 4 Type: Executable File Path: %WINDIR%\Installer\{F8DB820D-F5A1-E7F5-80B9-243E60676F3F} Group: Malware file Last Updated: April 8, 2013
17.	syshost.exe	1b5260af2477da7dbd3b77e37ddd67cc	4
Name: syshost.exe MD5: 1b5260af2477da7dbd3b77e37ddd67cc Size: 77.82 KB (77824 bytes) Detections: 4 Type: Executable File Path: %WINDIR%\Installer\{A8124A5A-78F1-76CC-752E-826F551BD3AD} Group: Malware file Last Updated: December 26, 2012
18.	syshost.exe	1348a9c29b1cb4a911bfaa760f523326	4
Name: syshost.exe MD5: 1348a9c29b1cb4a911bfaa760f523326 Size: 151.55 KB (151552 bytes) Detections: 4 Type: Executable File Path: %LOCALAPPDATA%\{F653C49E-BACF-974D-4247-8E7020139C38} Group: Malware file Last Updated: January 14, 2013
19.	syshost.exe	4c34d7e988b434b138e35d86f54f1c47	3
Name: syshost.exe MD5: 4c34d7e988b434b138e35d86f54f1c47 Size: 77.31 KB (77312 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\Installer\{7E070D7B-5969-F0A0-7CF9-61185B632BFA} Group: Malware file Last Updated: January 5, 2013
20.	syshost.exe	af749b21f2719896d5408c1216c83188	3
Name: syshost.exe MD5: af749b21f2719896d5408c1216c83188 Size: 77.82 KB (77824 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\Installer\{EEE9D395-AC97-337F-0BED-9C17EB9A3F50} Group: Malware file Last Updated: December 28, 2012
21.	syshost.exe	288b452a915d0ca9e7bb7157f25d0eb9	3
Name: syshost.exe MD5: 288b452a915d0ca9e7bb7157f25d0eb9 Size: 131.07 KB (131072 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\Installer\{BA4D53F4-8960-DEE1-E647-77C4C6329782} Group: Malware file Last Updated: January 21, 2013
22.	syshost.exe	e065429e5ac3c94cd79b3eeb94a9f4e9	2
Name: syshost.exe MD5: e065429e5ac3c94cd79b3eeb94a9f4e9 Size: 151.55 KB (151552 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\{676D58CC-CE66-F3ED-2777-82B70758DAD0} Group: Malware file Last Updated: January 21, 2013
23.	5071c.sys	8f9ebee084f45c6b7378ea9c3bbbcea5	1
Name: 5071c.sys MD5: 8f9ebee084f45c6b7378ea9c3bbbcea5 Size: 69.19 KB (69192 bytes) Detections: 1 Type: System file Path: %WINDIR%\system32\drivers Group: Malware file Last Updated: March 4, 2013
24.	86dadcaae13b6bc6.sys	279e87cc664b6e77c05560e45ef517f1	1
Name: 86dadcaae13b6bc6.sys MD5: 279e87cc664b6e77c05560e45ef517f1 Size: 59.13 KB (59136 bytes) Detections: 1 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: March 29, 2013
25.	662f2.sys	4e760d8f966a1d9f3bbe4afeb336e9da	1
Name: 662f2.sys MD5: 4e760d8f966a1d9f3bbe4afeb336e9da Size: 58.11 KB (58112 bytes) Detections: 1 Type: System file Path: %WINDIR%\system32\drivers Group: Malware file Last Updated: January 5, 2013
26.	61a57491bc0649b8.sys	8c55911cde8dd5c45e6be123f6ceaca1	1
Name: 61a57491bc0649b8.sys MD5: 8c55911cde8dd5c45e6be123f6ceaca1 Size: 46.26 KB (46264 bytes) Detections: 1 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 18, 2012
27.	edsmgr.exe
Name: edsmgr.exe Type: Executable File Group: Malware file
28.	121ecb4.sys
Name: 121ecb4.sys Type: System file Group: Malware file
29.	Recycle.Bin.exe
Name: Recycle.Bin.exe Type: Executable File Group: Malware file
30.	41fb2af0cd745ae6.exe
Name: 41fb2af0cd745ae6.exe Type: Executable File Group: Malware file

More files

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Necurs.A

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.Necurs.A

File System Details

Submit Comment

Trending

SSH-Snake Worm

1xlite-348611.top

Slime Ransomware

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?