TR/Rootkit.Gen2

By LoneStar in Rootkits

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	449

First Seen:	December 28, 2011
Last Seen:	December 31, 2020
OS(es) Affected:	Windows

TR/Rootkit.Gen2 is a rootkit that uses a system's Master Boot Record (MBR) as a launching ground. When doing so, TR/Rootkit.Gen2 may be able to initiate certain malicious actions without any interaction from the administrator or computer user. TR/Rootkit.Gen2 may run undetected for long periods of time. Manual remove is virtually impossible due to TR/Rootkit.Gen2 embedding itself deep into the system. The use of a trusted antispyware application may be necessary to completely rid a system of TR/Rootkit.Gen2.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Trj/OCJ.C
AVG	Hider.STP
Fortinet	W32/Rootkit_Kryptik.RU
McAfee	Artemis!DC441FC394D2
AVG	Agent3.AWLG
Sophos	Mal/ZAccess-C
McAfee-GW-Edition	Generic BackDoor!d2o
ClamAV	Trojan.Rootkit-3753
Avast	Win32:Zeroot [Rtk]
NOD32	Win32/Sirefef.DM
McAfee	ZeroAccess.r
AVG	Hider.USU
DrWeb	BackDoor.Maxplus
Sophos	Mal/Generic-S
Avast	Win32:Sirefef-AYM [Rtk]

SpyHunter Detects & Remove TR/Rootkit.Gen2

File System Details

TR/Rootkit.Gen2 may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	dfsc.sys	1f3e517a0717cda4ca95d9139bf9e0ab	35
Name: dfsc.sys MD5: 1f3e517a0717cda4ca95d9139bf9e0ab Size: 78.33 KB (78336 bytes) Detections: 35 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 10, 2012
2.	dfsc.sys	f7f11e66abf5c225437cb8bf219564a4	32
Name: dfsc.sys MD5: f7f11e66abf5c225437cb8bf219564a4 Size: 75.26 KB (75264 bytes) Detections: 32 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: July 30, 2013
3.	abasee.sys	8b8bfe4a0668e827528a772413ff58d1	22
Name: abasee.sys MD5: 8b8bfe4a0668e827528a772413ff58d1 Size: 8.7 KB (8704 bytes) Detections: 22 Type: System file Path: %WINDIR% Group: Malware file Last Updated: July 30, 2012
4.	tdx.sys	1f07ca2ef89e72705ede7a310647ce44	17
Name: tdx.sys MD5: 1f07ca2ef89e72705ede7a310647ce44 Size: 72.19 KB (72192 bytes) Detections: 17 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 10, 2012
5.	tdx.sys	8dcad53bba01450d47faff5fafec0d65	16
Name: tdx.sys MD5: 8dcad53bba01450d47faff5fafec0d65 Size: 74.75 KB (74752 bytes) Detections: 16 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 17, 2012
6.	ipsec.sys	4eb0d03142d98d9145d834fc32ab91b9	13
Name: ipsec.sys MD5: 4eb0d03142d98d9145d834fc32ab91b9 Size: 75.26 KB (75264 bytes) Detections: 13 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 1, 2012
7.	tmtdi.sys	5170bba4c7773193f0b09e81e8b90449	13
Name: tmtdi.sys MD5: 5170bba4c7773193f0b09e81e8b90449 Size: 89.87 KB (89872 bytes) Detections: 13 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 11, 2012
8.	netbt.sys	4f81e9a79eb44e2c806df03210e0a158	12
Name: netbt.sys MD5: 4f81e9a79eb44e2c806df03210e0a158 Size: 187.9 KB (187904 bytes) Detections: 12 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: April 11, 2012
9.	5016.sys	4efda15442033bf856d805af3d84ef2d	12
Name: 5016.sys MD5: 4efda15442033bf856d805af3d84ef2d Size: 138.75 KB (138752 bytes) Detections: 12 Type: System file Path: %TEMP% Group: Malware file Last Updated: January 1, 2012
10.	netbt.sys	8c90505c642dfd8d63236cd7e59c111e	8
Name: netbt.sys MD5: 8c90505c642dfd8d63236cd7e59c111e Size: 162.81 KB (162816 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: March 26, 2012
11.	afd.sys	019e4406ea95f682d601b4180de098b6	8
Name: afd.sys MD5: 019e4406ea95f682d601b4180de098b6 Size: 138.49 KB (138496 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: March 26, 2012
12.	dfsc.sys	38523be01eb6165df02199af46a6c04a	8
Name: dfsc.sys MD5: 38523be01eb6165df02199af46a6c04a Size: 78.33 KB (78336 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 17, 2012
13.	cdrom.sys	386f5af2eb9ed07dfe58a6550293db8c	8
Name: cdrom.sys MD5: 386f5af2eb9ed07dfe58a6550293db8c Size: 108.54 KB (108544 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: May 4, 2012
14.	netbt.sys	cd94b5242e1e00ff83ff2f91defb1493	8
Name: netbt.sys MD5: cd94b5242e1e00ff83ff2f91defb1493 Size: 187.9 KB (187904 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: October 26, 2012
15.	csc.sys	0cf826dd4cd540d899679200d4af1166	8
Name: csc.sys MD5: 0cf826dd4cd540d899679200d4af1166 Size: 388.09 KB (388096 bytes) Detections: 8 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 1, 2012
16.	5689.sys	e71abe44112ddfb3fffc1dc9c3b73291	7
Name: 5689.sys MD5: e71abe44112ddfb3fffc1dc9c3b73291 Size: 146.17 KB (146176 bytes) Detections: 7 Type: System file Path: %WINDIR%\TEMP Group: Malware file Last Updated: January 24, 2012
17.	smb.sys	95e9030e4d9f28e92f2915f47b4859a1	7
Name: smb.sys MD5: 95e9030e4d9f28e92f2915f47b4859a1 Size: 66.56 KB (66560 bytes) Detections: 7 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: November 19, 2012
18.	netbt.sys	acc367db6058f3fae97201fd6b553b51	5
Name: netbt.sys MD5: acc367db6058f3fae97201fd6b553b51 Size: 162.81 KB (162816 bytes) Detections: 5 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: May 30, 2014
19.	mrxsmb.sys	4938666bd0af200025aba945047d1c52	4
Name: mrxsmb.sys MD5: 4938666bd0af200025aba945047d1c52 Size: 454.01 KB (454016 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: February 13, 2012
20.	afd.sys	7c98aa643eab5a0eabc786239db07993	4
Name: afd.sys MD5: 7c98aa643eab5a0eabc786239db07993 Size: 273.4 KB (273408 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 19, 2012
21.	netbt.sys	e97c53038ccd221485e223a7c0516b6a	4
Name: netbt.sys MD5: e97c53038ccd221485e223a7c0516b6a Size: 162.81 KB (162816 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 10, 2012
22.	cdrom.sys	608876dd82ed880c6e65f146c9c7a6ec	4
Name: cdrom.sys MD5: 608876dd82ed880c6e65f146c9c7a6ec Size: 49.53 KB (49536 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 1, 2012
23.	dfsc.sys	3a2f2ee25152188a9a0d97c3dad5ebdb	3
Name: dfsc.sys MD5: 3a2f2ee25152188a9a0d97c3dad5ebdb Size: 78.33 KB (78336 bytes) Detections: 3 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: February 20, 2012
24.	i8042prt.sys	7b187f8fd0f8be0c59d5726213fa5552	3
Name: i8042prt.sys MD5: 7b187f8fd0f8be0c59d5726213fa5552 Size: 53.5 KB (53504 bytes) Detections: 3 Type: System file Path: %WINDIR%\System32\DRIVERS Group: Malware file Last Updated: April 17, 2013
25.	bsbxdefc.sys	1042058c8549bdaba98eb54e4c8ef41c	2
Name: bsbxdefc.sys MD5: 1042058c8549bdaba98eb54e4c8ef41c Size: 91.64 KB (91648 bytes) Detections: 2 Type: System file Path: %WINDIR%\system32\Drivers Group: Malware file Last Updated: March 1, 2013
26.	tdx.sys	597e080592f0128623d21c0ad071f280	1
Name: tdx.sys MD5: 597e080592f0128623d21c0ad071f280 Size: 72.19 KB (72192 bytes) Detections: 1 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: January 10, 2012
27.	18102.sys	dc441fc394d28d0aaf897412a3c2cad5	1
Name: 18102.sys MD5: dc441fc394d28d0aaf897412a3c2cad5 Size: 61.56 KB (61568 bytes) Detections: 1 Type: System file Path: %WINDIR%\system32\drivers Group: Malware file Last Updated: April 29, 2013
28.	%Temp%\mswinsck.exe
Name: %Temp%\mswinsck.exe Type: Executable File Group: Malware file
29.	%Documents and Settings%\All Users\Application Data iosejgfse.dll
Name: %Documents and Settings%\All Users\Application Data iosejgfse.dll Type: Dynamic link library Group: Malware file

More files

Registry Details

TR/Rootkit.Gen2 may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CLASSES_ROOT\secfile

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

TR/Rootkit.Gen2

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove TR/Rootkit.Gen2

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen