Threat Database Rootkits Win32:Necurs-E

Win32:Necurs-E

By Domesticus in Rootkits

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 3
First Seen: September 5, 2012
Last Seen: March 16, 2022
OS(es) Affected: Windows

Win32:Necurs-E is a Trojan dropper that belongs to a malware family that has been infecting PCs since 2011. Win32:Necurs-E is notable because Win32:Necurs-E uses rootkit techniques in order to prevent detection and removal of itself and of the malware that Win32:Necurs-E installs on the victim's computer. One of the main consequences of a Win32:Necurs-E infection is the malfunction of legitimate security software installed on the infected computer. This is because Win32:Necurs-E and malware associated with Trojan dropper tend to interfere with legitimate security software in order to protect themselves from removal.

If you suspect that your computer has been exposed to Win32:Necurs-E or to any other malware in the Necrus family of malware, ESG security researchers strongly advise to scan your hard drives with a reliable anti-malware scanner that is fully up to date. To ensure that your anti-malware software can detect Win32:Necurs-E, it is recommended to start up the infected PC from an alternate source, such as a CD or a removable drive or in Safe Mode.

Although Win32:Necurs-E itself does not cause many symptoms on the infected computer, this Trojan dropper will almost always install other malware on the infected computer which will cause a number of suspicious behaviors and symptoms. ESG security researchers have compiled the following list of unwanted behaviors associated with a Win32:Necurs-E infection or with malware linked to this Trojan dropper:

  • A Win32:Necurs-E infection will usually have a significant effect on your computer's performance. If you notice that your computer is running significantly slower than normal or that it crashes frequently, this may be a symptom of Win32:Necurs-E or the presence of other malware on your computer.
  • One of the most important symptoms associated with Win32:Necurs-E is that this Trojan dropper will install other malware on the infected computer. More notably, ESG security researchers have observed that Win32:Necurs-E creates folders and 'trash' files on the infected computer. If you notice the presence of new directories and files on your hard drive, coupled with the other symptoms listed here, then your computer may have been infected with Win32:Necurs-E.
  • Win32:Necurs-E will seldom attack alone. One of the main symptoms of malware associated with Win32:Necurs-E is the presence of suspicious error messages and security alerts. If your computer is displaying abnormal error messages when carrying out simple, normal operations, it is possible that your computer has been infected with malware.

Trending

Most Viewed

Loading...