Threat Database Trojans Trojan.Dracur

Trojan.Dracur

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 5,117
First Seen: September 20, 2010
Last Seen: October 13, 2024
OS(es) Affected: Windows

The detection of Trojan.Dracur on your system indicates a potential security threat that requires immediate attention. This type of malware can compromise your computer's integrity and put your personal data at risk. It is essential to understand the nature of this threat and take prompt action to remove it.

What Is Trojan.Dracur?

Trojan.Dracur is a type of malicious software that can infiltrate your computer without your knowledge or consent. The name "Trojan" refers to the fact that this malware can disguise itself as a legitimate program or file, making it difficult to detect. Trojan.Dracur can be used by attackers to gain unauthorized access to your system, steal sensitive information, or disrupt your computer's normal functioning.

How Trojan.Dracur Operates

Trojan.Dracur can operate in various ways, depending on its intended purpose. It may be designed to create a backdoor on your system, allowing attackers to remotely access your computer and execute commands. It can also be used to steal personal data, such as login credentials, credit card numbers, or other sensitive information. Additionally, Trojan.Dracur can be used to spread other types of malware, such as viruses or spyware, which can further compromise your system's security.

Symptoms of Infection

If your system is infected with Trojan.Dracur, you may notice unusual behavior, such as slow performance, frequent crashes, or unexpected pop-ups. You may also notice that your computer is connecting to unfamiliar websites or servers, or that your personal data is being transmitted without your consent. However, in some cases, the infection may not exhibit any noticeable symptoms, making it difficult to detect without the use of specialized security software.

  • Unexplained changes to your system settings or configuration
  • Appearance of unfamiliar programs or icons on your desktop
  • Increased network activity or unusual traffic patterns
  • Receiving unexpected emails or messages with suspicious attachments

How to Remove Trojan.Dracur

  1. Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow for a more effective removal process
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious files or programs
  3. Uninstall any suspicious programs or applications that may be related to the Trojan.Dracur infection
  4. Reset your web browsers, such as Chrome, Firefox, or Edge, to their default settings to remove any malicious extensions or add-ons
  5. Reboot your computer and perform another scan with your anti-malware tool to ensure that the infection has been completely removed

Conclusion

Removing Trojan.Dracur from your system requires a combination of technical expertise and caution. It is essential to follow the steps outlined above and to use reputable security software to detect and remove the malware. Additionally, it is crucial to practice safe computing habits, such as avoiding suspicious downloads and emails, to prevent future infections. By taking prompt action and being proactive about your system's security, you can protect your personal data and prevent further damage to your computer.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Symantec Spyware.SpyPal
Fortinet Adware/Ezula
Kaspersky not-a-virus:AdWare.Win32.EZula.hja
Kaspersky not-a-virus:AdWare.Win32.EZula.hcx
Kaspersky not-a-virus:Monitor.Win32.PowerSpy.cki
AVG Logger.JXM
Kaspersky not-a-virus:Monitor.Win32.PowerSpy.bwj
AVG Logger.JCN
NOD32 a variant of Win32/Kryptik.EUR
AVG Cryptic.ACO
AVG Cryptic.BAZ
Fortinet W32/Krypt.E!tr
Ikarus Virus.Win32.Opanki
Sophos Mal/Oficla-A
AntiVir Worm/Autorun.40960.A

File System Details

Trojan.Dracur may create the following file(s):
# File Name MD5 Detections
1. cscdn.dll ed6dfdf104a8c625c0a3ad5a4c8013c2 102
2. wins.exe fc63520168d987bd1c955ab76a87ddd9 28
3. svchost.exe 14d17f6982501c0a008cce2b09b5f7ef 22
4. htlgv.dll 8d54bdb15f73425d7d348c4a9cab813f 15
5. updates.exe 4b32ba45f830da5b83cb726d4f89fab3 12
6. wedfsadeex.exe ea673ee280feaedd500a1829f7c0dc52 10
7. 4236c653fe46331e366c58802f167feb9cd22dbce1788be9f63aff9bb720312a.exe cb1080bdbe57c7a240cb19a15e2b82f2 8
8. MPK.exe 4b98ccab83254cc2008602678fbfa5ba 7
9. Setup_SXPasswordSuite.exe cf7f30a6a4186d7e6bcd66c29c5edc2d 6
10. cbbaby.dll 7ecb8b71451bdc5ffa3c31a59331ee3d 4
11. jyfemdwtsbl.exe e71e51447fd5c4735add7e1d4422359d 3
12. f46813e3.exe 2c716dc1198cb4baa9781a3ac665ba26 3
13. MYBAR.DLL 4435ebe40727a16784e8cb49970fc42e 2
14. apcdm.exe 4950e7a28c7f56a961183842821f7d47 1
15. sycors.exe 25ae773ceb012b56be8c8e48fcc91dad 1
16. 156820000.exe 5f52eaf194468d8482aa2c1c21a70efd 1
17. winlogon.exe 7132499f4cf7275d9f2f7e8f14172d21 1
18. Iasex.dll 6bd5f3f7417c12af5925b809f2be5d87 1
19. 294925015.exe 70e0113e5d22ee47a7275896060f3e01 1
20. papajh.exe 31560ac785523be71eea82fcd6dcc79f 1
21. msstream.dll 63dfe2e4bc3c90404494d19ae30d0c80 1
22. KBDFnp.dll 0fd9e25447501e123d03c345485fa177 1
23. sewd.sys d7285835cef28300d763b76428256dcf 1
24. atdgijxo.exe 2f8c731c3f21c49062d6a35f5f2573ad 1
25. KB5344671.exe b39deb6b53148bf42c3e095056ae7fb4 1
26. ieproxy64.dll 96bc58a58bbbf595f32cf558c1ac45d2 1
27. igfxsrv86.exe 41465c84091a1223eac5b70b2b4c8830 1
28. winupdate.exe 00e397aabe55ba01bc7863fcc52c1991 1
More files