Threat Database Backdoors Backdoor.Necurs

Backdoor.Necurs

By CagedTech in Backdoors

Threat Scorecard

Ranking: 18,972
Threat Level: 60 % (Medium)
Infected Computers: 42,003
First Seen: January 15, 2014
Last Seen: November 24, 2023
OS(es) Affected: Windows

SpyHunter Detects & Remove Backdoor.Necurs

File System Details

Backdoor.Necurs may create the following file(s):
# File Name MD5 Detections
1. ecd992a7.tmp 0756b23d32f9ab95a4f0b0682277612e 1,158
2. syshost.exe fc9dd0d7fa8c207b8716585c5c23d7e6 991
3. system.pif ff6e2356def2cf9cd478d006ea23be3e 816
4. syshost.exe 8f548575d437d7f02bfc08f8025e9f53 736
5. syshost.exe 943a641f4336f919a14bb10cad6daa5e 523
6. syshost.exe 4ce11aab335b7e53a86e5a5ba59c0f91 488
7. syshost.exe 4bc2b4c8a582983d71bd1767f6956259 389
8. syshost.exe 3c30abe959f8af94f24c6cca183d09e1 389
9. syshost.exe df9b7e080e31d93b6e9606818d380ef8 353
10. syshost.exe 3c74b1dfd9de4fad7e33c055233b030a 249
11. KB1357552703.exe 5fcf43009cd3c277bdc04b51f5bc59ff 225
12. syshost.exe 6ec2eb9d8a2df3679cf93a48644fb9e4 176
13. syshost.exe 1f816147b9dffa70e960598eafa1296e 162
14. syshost.exe cf69dd6310138fa009ce8509c4cfbcbc 158
15. 6396cdfd.tmp 8b0cca757e097e452182a8e6c2090e13 153
16. syshost.exe 0f9d31f8e6824aa99f5934f89e5a92c8 144
17. syshost.exe cc4a642b62a8b0eac345f23792f4daa2 95
18. syshost.exe 4a14bd6ca87a5ae21727a79f284f3daa 92
19. syshost.exe dc742b7d8b0d991d9bbce487d62a608a 91
20. syshost.exe f2e93490080c4793d3d043a82d5b15f9 89
21. syshost.exe 2791a4c680d0d24c74c83962732a8631 80
22. syshost.exe 2ab2b9c15f19dbb245173075fc375842 77
23. syshost.exe bf258768b6df9e423ddff1ef1b4c2343 62
24. syshost.exe e9e77704598ab09b4a4f070075b35a6b 35
25. syshost.exe 2cfe9c78a65207e9d473af371fb01da6 32
26. syshost.exe 14e54cffa8d6ead442965e2e13bb5dab 25
27. syshost.exe 9d00adc894cca1b5002b59dd2bb753cd 20
28. syshost.exe d9e5b11493061f67e04c4b52c7068f53 1
More files

Registry Details

Backdoor.Necurs may create the following registry entry or registry entries:
SYSTEM\ControlSet001\Services\syshost32
SYSTEM\ControlSet002\Services\syshost32
SYSTEM\CurrentControlSet\Services\syshost32

Trending

Most Viewed

Loading...