Home Malware Programs Rootkits Rootkit.TDSS.d

Rootkit.TDSS.d

Posted: August 23, 2011

Rootkit TDSS.d is a variant of the TDSS Rootkit that's often distributed by dropper Trojans and malicious toolbars like BigSeekPro, Coupon Alert Toolbar, Resulturl and Findxplorer. Like its older brother TDSS Rootkit, Rootkit TDSS.d uses advanced techniques to hide its code from detection, while Rootkit TDSS.d creates high-level security vulnerabilities on your PC. SpywareRemove.com malware researchers have found that Rootkit TDSS.d uses widely-applicable attacks that can be sued for several different forms of harm, including allowing hackers to control your PC, transferring private information to criminals, disabling security features, crashing security programs or installing other malicious applications. Even though visible signs of Rootkit TDSS.d assaults may be minimal or nonexistent, you should consider any possibility of infection by Rootkit TDSS.d to be an extreme threat to your PC and resort to an equally powerful anti-malware product to remove Rootkit TDSS.d and related infections.

What Rootkit TDSS.d is Doing on Your PC (and Why You Don't Want It There)

In the majority of circumstances that SpywareRemove.com malware researchers have analyzed, Rootkit TDSS.d will be installed along with other infections, such as backdoor and dropper Trojans, adware or browser hijackers. However, Rootkit TDSS.d could be thought of as the worst of a bad batch, due to its tendencies to hide in areas of your PC that are difficult to scan and cleanse from infection. Standard rootkit tactics that are used by Rootkit TDSS.d or similar rootkits (like TDSS Rootkit, TDL3 Rootkit, Rootkit.Agent/Gen-Local or Rootkit.Boot.Mybios.a) create an infection in the Master Boot Record, in the System Restore backup files or in a system kernel. By using these methods, Rootkit TDSS.d may be able to load even on Safe Mode and can restore itself from deletion and even a full Windows reinstallation.

Even though Rootkit TDSS.d will do everything that's possible to hide itself, you may still find Rootkit TDSS.d before it's too late if you keep an eye out for symptoms that are affiliated with Rootkit TDSS.d and related infections, such as:

  • Your Internet connectivity may be disabled by Rootkit TDSS.d, either periodically or on a permanent basis.
  • Your system may experience slowdown or other performance issues due to the sheer amount of system resources that Rootkit TDSS.d uses for itself.
  • Rootkit TDSS.d may regenerate itself even if you try to delete Rootkit TDSS.d or force anti-malware programs to ignore Rootkit TDSS.d after they've detected a Rootkit TDSS.d infection. SpywareRemove.com malware analysts have found that keeping your anti-malware programs up-to-date and using Safe Mode for system scans can help to lower the frequency of these Rootkit TDSS.d attacks.
  • You may be prevented from formatting your hard drives or taking other actions that could wipe out Rootkit TDSS.d and any infections that came with Rootkit TDSS.d.
  • Rootkit TDSS.d may also disable your System Restore function or infection, so that any attempt to restore Windows will also restore Rootkit TDSS.d.

Deflecting Rootkit TDSS.d's Lunges at Your Computer and Everything That's On It

Rootkit TDSS.d attacks are used for the same purposes as basic TDSS Rootkit attacks: to generate revenue for criminals by compromising your computer in any ways that are necessary. This can include theft of private information like your bank account passwords, redirecting your web browser to advertisement-based websites or creating dishonest advertisements that lure you into purchasing scamware.

Rootkit TDSS.d infections may consist of multiple Trojans that all perform some or all of these functions, such as Virus:Win32/Alureon.H, Trojan:Win32/Alureon.DN or the Google Redirect Virus. However, Safe Mode is often successful at disabling such Trojan threats, and from there, you should be able to use a good anti-malware product to delete Rootkit TDSS.d and its malicious helpers.

Loading...