Backdoor:Win32/Nosrawec.C

Posted: November 7, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	99

First Seen:	November 7, 2012
OS(es) Affected:	Windows

Backdoor:Win32/Nosrawec.C is a backdoor Trojan that recycle code copied from similar Trojans that date back to 2010. Despite the dustiness of its code, Backdoor:Win32/Nosrawec.C can still be a danger to most Windows PCs due to its ability to allow criminals to have unauthorized control over a compromised computer. Backdoor:Win32/Nosrawec.C's attacks are symptomless by default and can include stealing personal information, controlling your mouse and blocking anti-malware products, among other things. For safety's sake, SpywareRemove.com malware experts suggest using proven-competent security programs to remove Backdoor:Win32/Nosrawec.C. However, Backdoor:Win32/Nosrawec.C also should be disabled through standard anti-malware strategies before its deletion.

Backdoor:Win32/Nosrawec.C: the Tweedledum to Several Tweedledumbers

Backdoor:Win32/Nosrawec.C is identified as a distinct and individual Trojan, but close analysis of Backdoor:Win32/Nosrawec.C's code reveals that Backdoor:Win32/Nosrawec.C's origin lies in Trojans from 2010. This ongoing copy-paste routine to implement old code in new Trojans also has extended to similar Trojans with backdoor and spyware features. So far, the current list of modern Trojans with code that's shared by Backdoor:Win32/Nosrawec.C includes TrojanSpy:Win32/SSonce.C, Backdoor:Win32/Bezigate.A and Backdoor:Win32/Talsab.C.

Many of these Trojans like Backdoor:Win32/Nosrawec.C have been found to use Trojan droppers to install themselves. Although Backdoor:Win32/Nosrawec.C can't distribute itself, SpywareRemove.com malware researchers do warn that Backdoor:Win32/Nosrawec.C can install other malware once Backdoor:Win32/Nosrawec.C is installed on your PC, and any attempts to get rid of Backdoor:Win32/Nosrawec.C should involve system scans that can detect related PC threats.

Backdoor:Win32/Nosrawec.C's attacks are likely to include, but aren't limited to:

Contact with a remote server that allows criminals to display a dangerous level of access to your PC and control over its programs or settings.
Spyware attacks such as keylogging (recording keyboard-typed information), form-grabbing (monitoring text fields that are used in browsers and other programs), capturing screen shots and monitoring your webcam.
Attempts to block you from using other programs, particularly popular brands of anti-virus products.
Malicious control over input devices like your keyboard and mouse.
Installing other malicious programs that can be used for additional attacks against your PC. Some examples of common payloads include browser hijackers that redirect you to hostile sites and fake security programs (like Vista Internet Security 2013 and similar scamware).

Just Saying 'No Way' to a Nosrawec Attack

Backdoor:Win32/Nosrawec.C uses obfuscation to prevent itself from being detected and may have its development continued for the purpose of avoiding anti-malware detection. However, SpywareRemove.com malware research team is glad to state that Backdoor:Win32/Nosrawec.C hasn't shown signs of having advanced defenses, such as rootkit functions, that would make removing Backdoor:Win32/Nosrawec.C especially difficult.

If Backdoor:Win32/Nosrawec.C blocks anti-malware programs that could remove Backdoor:Win32/Nosrawec.C, you can disable Backdoor:Win32/Nosrawec.C by booting your PC into Safe Mode or by booting from a removable USB device. Once Backdoor:Win32/Nosrawec.C is disabled by either of these methods, most competent brands of anti-malware programs should be able to remove Backdoor:Win32/Nosrawec.C safely.

Backdoor:Win32/Nosrawec.C

Threat Metric

Backdoor:Win32/Nosrawec.C: the Tweedledum to Several Tweedledumbers

Just Saying 'No Way' to a Nosrawec Attack

Leave a Reply