Rootkit.Small.ra Description

Rootkit.Small.ra is a rootkit infection which conceals itself as a security tool. Rootkit.Small.ra enters the users system through a Trojan application which imitates Windows firewall notifications to entice the user to click on the “Enable Protection” button and thereby installs the Trojan. Rootkit.Small.ra will perform pretend scans that will produce numerous infections that do not exist. This is all conducted to fool the user into buying the full paid version of the application. Rootkit.Small.ra may also download additional malware to the users system. Rootkit.Small.ra poses a serious threat as it could permit an attacker to steal personal information. Rootkit.Small.ra is also capable of hijacking the user’s web browser and redirecting it to its website. Rootkit.Small.ra may slow down the user’s computer and internet connection. Rootkit.Small.ra is a dangerous threat and should be removed without hesitation.

Type: Rootkits

Automatic Detection of Rootkit.Small.ra

Rootkit.Small.ra Technical Report

As new Rootkit.Small.ra details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Rootkit.Small.ra files with its MD5s were created in the system:

Rootkit.Small.ra has typically the following processes in memory:

• autochk.dll
• %SYSTEMROOT%\system32\autochk.dll

Important Article Disclaimer