ROOTKIT
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
Rootkit is a malicious program, which has the capability to hide malicious files, folders, processes, Windows registry entries, and even ports, among others on the infected system. It can hide itself and its components, making it difficult to detect and analyze. It also conceals traces of its presence on the infected system. In addition, there are rootkits that terminate antimalware-related processes, which can possibly lead to further system infection by other malware.
Cybercriminals typically use rootkits for stealth mechanism purposes. Malware families download rootkit components to remain undetected in the system or network. Typically, this type of malware may be dropped or downloaded by other malware on the system. It may also be dropped or downloaded via social engineering tactics or means.
SOLUTION
Trend customers:
Keep your pattern and scan engine files updated. Trend Micro antivirus software can clean or remove most types of computer threats. Malware, though, such as Trojans, scripts, overwriting viruses and joke programs which are identified as uncleanable, should simply be deleted.
All Internet users:
- Use HouseCall - the Trend Micro online threat scanner to check for malware that may already be on your PC.
- Catch malware/grayware before they affect your PC or network. Secure your Web world with Trend Micro products that offer the best anti-threat and content security solutions for home users, corporate users, and ISPs. Go here for more information on Trend Micro products that fit your needs.
Did this description help? Tell us how we did.