Welcome to the Virus Encyclopedia of Panda Security.
It ends processes belonging to several security tools and has rootkit functionalities in order to make its detection more difficult. It spreads via email in a message with an attached file and an image that includes a text.
|First detected on:||April 13, 2007|
|Detection updated on:||Nov. 21, 2007|
|Yes, using TruPrevent Technologies
Nurech.Z is a worm that ends several processes belonging to security tools, such as antivirus programs and firewalls, among others.
Additionally, it has rootkit functionalities, which allow it to make its detection more difficult.
Nurech.Z spreads via email in a message with an attached file that is compressed with a password.
Nurech.Z is easy to recognize, as it reaches the computer in an email message with the following characteristics:
- Subject: it is variable and can be one of the following:
Virus Activity Detected!
Worm Activity Detected!
- Message: it contains an image like the following with a text and a password in order to decompress the attached file:
- Attachments: it is compressed with a password that is given in the message and can be one of the following:
BUGFIX-%5 random characters%.ZIP
HOTFIX-%5 random characters%.ZIP
PATCH-%4 random characters%.ZIP
REMOVAL-%5 random characters%.ZIP