Backdoor.NetWiredRC

Short bio

Backdoor.NetWiredRC is Malwarebytes’ detection name for a large family of Trojans targeting Windows systems.

Type and source of infection

Backdoor.NetWiredRC is a versatile and dangerous threat that has also been used by state sponsored groups like APT33. It is capable of information stealing, providing remote access, and downloading additional malware. Backdoor.NetWiredRC spreads primarily through malicious phishing campaigns.

Aftermath

• Data/information about the system may have been stolen
• User credentials may have been stolen
• Affected system may be susceptible to further attacks and/or infection due to a backdoor that was opened

Protection

Malwarebytes blocks Backdoor.NetWiredRC

Business remediation

How to remove Backdoor.NetWiredRC with the Malwarebytes Nebula console

You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.

Nebula endpoint tasks menu

Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.

On the Quarantine page you can see which threats were quarantined and restore them if necessary.

Home remediation

Malwarebytes can detect and remove {detection name} without further user interaction.

1. Please download Malwarebytes to your desktop.
2. Double-click MBSetup.exe and follow the prompts to install the program.
3. When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
4. Click on the Get started button.
5. Click Scan to start a Threat Scan.
6. Click Quarantine to remove the found threats.
7. Reboot the system if prompted to complete the removal process.