Wednesday, November 9, 2011

TDSS Rootkit Infects Tons of Malware to Random Computers


TDSS Rootkit is a Trojan that infects computer systems together with some other malware infection. The infections is famous for annoying computer users with tons of unwanted security notifications, pop up ads, etc., downloading and executing other threats, disabling other programs and so on. The program is known to spread using different names so you can also find it as Alureon, ZeroAccess, TDL3, TDL4 and so on.

TDSS infection is completely invisible on the system and its existence can be recognized only by noticing certain symptoms there. The main reason why it is not removed from the system straight away is because it disables your legitimate security tools. Then you will notice that every time you will try to find something on the Internet your search results will be different from what you were actually expecting. You will constantly get redirected to various websites instead of seeing real search results. Such Google redirections are the most common sign that your system is infected.

This rootkit also disables lots of legitimate programs that you are usually able to use. The program is actually designed this way to stop certain programs. As already mentioned before, first of all the program tries to disable all security tools and protect itself from being removed from the system.

Another trick of this badware is that its files have the names of regular driver names. Usually, original drivers are replaced by malicious ones installed by TDSS. Most of the times you will not see any of the processes of this badware as it tends to hide all the processes running in order to protect them from being detected. As you may already understand, TDSS rootkit causes tons of problems and it must be eliminated as soon as possible.
The best tool to remove this infection that was suggested by most of security experts is TDSSkiller.

According to them once you scan your system with it the infection should be gone. Make sure to restart your system when the scan finishes in order to get a full effect of the program. Additionally, you should run a full system scan with your antivirus program. It will check any other infections that could have infiltrated into the system together with TDSS. Make sure to have reputable and upgraded antivirus and antispyware programs on your system. One more important thing to mention, if you have been infected with any other badware that was asking for you to pay and you have revealed your credit card details, make sure to contact your credit card company and dispute the charges.
http://www.2-viruses.com
Article Source: http://EzineArticles.com/?expert=Renata_Mykolaityte

No comments:

Post a Comment