WORM_NUCRP.GEN

This is Trend Micro’s detection for suspicious files that manifest characteristics similar to WORM_NUWAR variants’ compression algorithm. This pattern also detects files which are encrypted by a certain encryptor and compressed by UPX.

If your Trend Micro product detects a file under this detection name, it is highly recommended that you delete the file, or at the very least prevent it from executing. However, if you have reason to believe that a detected file is non-malicious, you can submit samples for analysis. Detailed analysis will be done on submitted samples and corresponding cleaning instructions may be applied, if necessary.

To submit files, please refer to the Solution section.

Related Items