Rootkit.Necurs is Malwarebytes’ generic detection for a family of rootkits related to the Necurs botnet.
Malwarebytes protects users from Rootkit.Necurs using real time protection.
Malwarebytes blocks Rootkit.Necurs
Malwarebytes can detect and remove Rootkit.Necurs without further user interaction.
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
On the Quarantine page you can see which threats were quarantined and restore them if necessary.
How to enable the scan for rootkits option:
Go to Settings > Policies.
Click New or select an existing policy.
Choose your endpoints operating systems affected by this policy. Select from the following tabs:
– Windows
– Mac
– Linux
Select the Settings tab to see the specific settings available for each operating system.
Select Scan Rootkits: The scan searches for rootkits. This may increase the time required to complete a scan.
Select your language