Eric.freyssinet at 22:28, 30 July 2015

2015-07-30T22:28:25Z

← Older revision		Revision as of 22:28, 30 July 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|~~Image~~=		\|Botnet=Necurs,
	\|~~Legend~~=		\|Malware=,
	\|~~Document~~=		\|ExploitKit=,
	\|~~Licence=~~		\|CCProtocol=,
	~~\|Video~~=		\|Year=2012
	\|~~Link~~=~~http://blogs.technet.com/b/mmpc/archive/~~2012~~/12/06/unexpected-reboot-necurs.aspx blogs.technet.com~~
	~~\|Author=Tim Liu,~~
	~~\|NomRevue=Malware Protection Center~~
	\|Date=2012-12-06		\|Date=2012-12-06
	\|Editor=Microsoft		\|Editor=Microsoft
	\|~~Year~~=2012		\|Link=http://blogs.technet.com/b/mmpc/archive/2012/12/06/unexpected-reboot-necurs.aspx
	\|~~ISBN=~~		\|Author=Tim Liu,
	~~\|Page~~=
	\|Abstract=Necurs is a prevalent threat in the wild at the moment - variants of Necurs were reported on 83,427 unique machines during the month of November 2012.		\|Abstract=Necurs is a prevalent threat in the wild at the moment - variants of Necurs were reported on 83,427 unique machines during the month of November 2012.

Line 23:		Line 19:
	Stop security applications from functioning		Stop security applications from functioning
	In addition Necurs contains backdoor functionality, allowing remote access and control of the infected computer. Necurs also monitors and filters network activity and has been observed to send spam and install rogue security software. Nefariousness aplenty. See our Trojan:Win32/Necurs family write-up for the full details.		In addition Necurs contains backdoor functionality, allowing remote access and control of the infected computer. Necurs also monitors and filters network activity and has been observed to send spam and install rogue security software. Nefariousness aplenty. See our Trojan:Win32/Necurs family write-up for the full details.
	\|~~Botnet~~=~~Necurs,~~		\|Document=
	\|Malware=,		\|Licence=
	\|~~ExploitKit~~=,		\|Video=
	\|~~CCProtocol~~=,		\|NomRevue=Malware Protection Center
	\|Operation=,		\|ISBN=
	\|Keyword=,		\|Page=
			\|Operation=,
			\|Keyword=,
	}}		}}

Eric.freyssinet: 1 revision imported

2015-02-07T14:29:12Z

1 revision imported

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blogs.technet.com/b/mmpc/archive/2012/12/06/unexpected-reboot-necurs.aspx blogs.technet.com
|Author=Tim Liu,
|NomRevue=Malware Protection Center
|Date=2012-12-06
|Editor=Microsoft
|Year=2012
|ISBN=
|Page=
|Abstract=Necurs is a prevalent threat in the wild at the moment - variants of Necurs were reported on 83,427 unique machines during the month of November 2012.

Necurs is mostly distributed by drive-by download. This means that you might be silently infected by Necurs when you visit websites that have been compromised by exploit kits such as Blackhole.

So what does Necurs actually do? At a high level, it enables further compromise by providing the functionality to:

Download additional malware
Hide its components
Stop security applications from functioning
In addition Necurs contains backdoor functionality, allowing remote access and control of the infected computer. Necurs also monitors and filters network activity and has been observed to send spam and install rogue security software. Nefariousness aplenty. See our Trojan:Win32/Necurs family write-up for the full details.
|Botnet=Necurs,
|Malware=,
|ExploitKit=,
|CCProtocol=,
|Operation=,
|Keyword=,
}}

Unexpected reboot: Necurs - Revision history

Eric.freyssinet at 22:28, 30 July 2015

Eric.freyssinet: 1 revision imported