Threat Database Trojans Trojan.Simda.gen!A

Trojan.Simda.gen!A

By Domesticus in Trojans

Threat Scorecard

Ranking: 16,354
Threat Level: 80 % (High)
Infected Computers: 605
First Seen: December 7, 2011
Last Seen: August 30, 2023
OS(es) Affected: Windows

Trojan.Simda.gen!A is a dangerous kernel mode rootkit infection that is quite difficult to detect and remove. ESG security researchers have associated the Trojan.Simda.gen!A rootkit with various browser hijackers. This rootkit also creates a backdoor into the infected computer, allowing criminals to gain access to the victim's computer from a remote location. Using Trojan.Simda.gen!A, criminals can spy on your activities, steal private information or install other malware on your computer. ESG security researchers advise removing Trojan.Simda.gen!A with a reliable anti-malware program. Unfortunately, Trojan.Simda.gen!A has advanced features that often make it very difficult to remove without a specialized tool, even when using Windows' Safe Mode. ESG malware analysts recommend using a specialized anti-rootkit application in order to ensure that all traces of Trojan.Simda.gen!A are removed from your computer. Trojan.Simda.gen!A poses a severe threat to your computer and Trojan.Simda.gen!A should be removed immediately.

Trojan.Simda.gen!A is one of the many Trojans that belong to the Simda family of malware. This is a large family of rootkits and Trojan infections used to install a backdoor into their victim's computers. There are often numerous components involved in a Simda-related malware attack. Because of this, Trojan.Simda.gen!A will seldom attack alone and will often be associated with additional malware threats on the infected computer. While Trojan.Simda.gen!A itself will rarely cause symptoms on the victim's computer, its associated malware components will frequently cause problems that will point to the presence of Trojan.Simda.gen!A on the infected computer. The two most common problems associated with the presence of Trojan.Simda.gen!A are listed below:

  • Trojan.Simda.gen!A is closely associated with browser hijackers. Because of this, computers infected with Trojan.Simda.gen!A may present frequent browser redirects, often leading computer users to phishing websites or to websites that promote known malware or carry out common online scams.
  • Trojan.Simda.gen!A will also create a backdoor on the victim's computer. If you detect suspicious network activity, it may be Trojan.Simda.gen!A connecting to a remote server in order to be given instructions from its command and control server through its backdoor.

Due to the way Trojan.Simda.gen!A can backup and reinstall itself, advanced removal techniques may be necessary in order to remove Trojan.Simda.gen!A completely. ESG malware researchers advise using only the most powerful anti-malware software available to scan your infected computer. It is also highly recommended starting up Windows and to scan the infected computer from a source that has not been compromised, such as a shared network drive or an external memory drive.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
McAfee Artemis!F1202B91EAFC
Fortinet W32/SimdaM!tr
AntiVir TR/Agent.265688
McAfee Artemis!1DB2E1E5D82F
AVG Crypt.BAOV
AntiVir TR/Crypt.XPACK.Gen
Sophos Mal/Generic-S
McAfee Artemis!35723C5D6CFA
McAfee TDSS
Fortinet W32/RLoader.A!tr
Sophos Troj/Agent-VVB
Symantec Trojan.Rloader!inf
F-Prot W32/Backdoor2.HKNO
K7AntiVirus Backdoor
McAfee Generic Rootkit.el

SpyHunter Detects & Remove Trojan.Simda.gen!A

File System Details

Trojan.Simda.gen!A may create the following file(s):
# File Name MD5 Detections
1. 5689.sys 31cb3ce3387a7b27678a90f95f3eb4ec 125
2. 5689.sys 2eeed6a3617d64374d70a6207d6ab554 112
3. privacy.exe f80f4835b6c4c1b798df4a858499e973 11
4. privacy.exe a8f879c74d734e4f7267749670b28e81 10
5. sqlesw32.dll 0215517550578032dbaf397542224388 8
6. sqlcsw32.dll b1a8f163e54e5eb0b8e08a7d21793f2b 7
7. privacy.exe a3249920ff48ff18a3067afd89272905 6
8. setup.exe 8b72db84bb9ef91c7a9f49f8e1d68183 5
9. 5689.sys 98ff2256f227f62add31aab4c010fadf 5
10. 5689.sys 50d7d0ec61ab56a5d249dff4a801d279 4
11. ACPI.sys dcce754e13fe7daa579d8f906cf3b388 4
12. acpi.sys 1db2e1e5d82fcf97145750c9afb6267b 4
13. 5728.sys 1a06c9791693b66fc6557a6c32aaf516 2
14. 5016.sys 8359f0e9b29334e49252908c4d1b9ae7 2
15. 5016.sys 9538a47443ec5999b490e68b46ab944d 2
16. Wdf01000.sys 882877a8b2c541ebe46620ee5f7fc385 2
17. ACPI.sys b981db4f6c4ce82bf0988a8fe901ea96 2
18. ACPI.sys ea38c961260f29295c6d03070fa9d0b5 2
19. Wdf01000.sys 6ed4faa0734a392d0fa7d78502a68db8 2
20. ACPI.sys 78dba80f47dcdf4010d9581e9cd26298 2
21. ARQ5oKqj9YW2bJ.exe c31bf1bf01ca7b5f3ea5885d7639c946 1
22. jrzplm1gJUM5NX.exe 5b6e473a38c5d66ab9240bfdfc5bd916 1
23. 5689.sys c21d107624298311ca78f15c0e457440 1
24. 8039.sys a00f501b7134930fceeb8f7a53d9c382 1
25. 8050.sys 0e5ed1dc5d8b8f0a030278768b7c10e6 1
26. 8007.sys 3d1d026ddc1385926dd3a721ab4b287c 1
27. 5613.sys 35723c5d6cfa1166984aac1cb35f6b53 1
28. 5689.sys 10028a21f2912b7a9b101251fd367c10 1
More files

Trending

Most Viewed

Loading...