Backdoor.NanoCore

What is Nanocore?

Backdoor.NanoCore is a Trojancapable of gathering information from Windows systems.

Backdoor.NanoCore Symptoms

Backdoor.NanoCore can provide the threat actorwith information such as computer name and OSof the affected system. It also opens a backdoor that allows the threat actors to access the webcam and microphone, view the desktop, create internet message windows and offers other options.

How to protect against Backdoor.NanoCore

Malwarebytes blocks Backdoor.NanoCore

How to remove a Backdoor.NanoCore Trojan?

Malwarebytes can remove Backdoor.NanoCore without further user interaction.

1. Please download Malwarebytesto your desktop.
2. Double-click MBSetup.exeand follow the prompts to install the program.
3. When your Malwarebytes for Windowsinstallation completes, the program opens to the Welcome to Malwarebytes screen.
4. Click on the Get started button.
5. Click Scan to start a Threat Scan.
6. Click Quarantineto remove the found threats.
7. Reboot the system if prompted to complete the removal process.

Business remediation

How to remove Backdoor.NanoCore with the Malwarebytes Nebula console

You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.

Nebula endpoint tasks menu

Choose the Scan + Quarantine option. Afterwards you can check the Detections pageto see which threats were found.

On the Quarantine pageyou can see which threats were quarantined and restore them if necessary.