Threat Database Backdoors Backdoor.TDSS

Backdoor.TDSS

Threat Scorecard

Ranking: 16,241
Threat Level: 80 % (High)
Infected Computers: 90
First Seen: July 24, 2009
Last Seen: July 20, 2023
OS(es) Affected: Windows

Backdoor.TDSS is a malicious parasite that operates in secret and may in fact be associated with rogue anti-spyware application Antivirus 2009. Backdoor.TDSS is typically downloaded and installed onto your computer through vulnerabilities in the security software. Once inside your system, Backdoor.TDSS will embed itself into the registry in order to open unsecured remote access to an outside party in order for them to gain access to your computer and all personal information data stored on it.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AhnLab-V3 Trojan/Win32.Hiloti
BitDefender Gen:Variant.Hiloti.1
McAfee Hiloti.gen.e
AVG Hiloti.BC
Ikarus Trojan.Win32.Hiloti
AVG Hiloti.BD
Ikarus Trojan.Hiloti
Sunbelt Trojan.Win32.Hiloti.aa (v)
eTrust-Vet Win32/FakeAV.I!generic
DrWeb BackDoor.Tdss
Sophos Mal/Hiloti-D
F-Prot W32/Hiloti.I.gen!Eldorado
NOD32 a variant of Win32/Cimag.DF
NOD32 a variant of Win32/Kryptik.FGP
McAfee Artemis!3F3440EA64EE

SpyHunter Detects & Remove Backdoor.TDSS

File System Details

Backdoor.TDSS may create the following file(s):
# File Name MD5 Detections
1. aswdwi2.dll a07fd1af85d17411ee5c6d180cc11066 7
2. hFWiopl7.dll 243c2c0ba2ec68df66645eea5393e0b4 6
3. csfl32.dll 3453b5a8b7b9c66be79f85fc8ae06789 1
4. wpscrict.dll 8f65644223a04d8393a460ebeee38a17 1
5. KBDHReo.dll 4574adfe1adb6fd636c71aa06b309cff 1
6. wdbgmeg.dll 69fe1c421f3c55abc7a66923b1d5c20a 1
7. kcat432.dll 68f1e7437c3fece769937c4b8cb3bc15 1
8. kbdmsid.dll 1d62f636ac023971f898fb11061af152 1
9. svchost.exe 74061c89bfb41c8d704a4956a756f7eb 0
10. services.exe b6f4e652ed5e9cb7b8c2241a50427614 0
11. iemodule.dll 79a19899cf8b2dcbdb87962bf22701f8 0
12. clspackxq.exe 70f6b2522ecf2e51b98e737fdb3cf81e 0
13. wscsvc32.exe ecca8c1a429e801aa7f3534add5ac5e1 0
14. Installer.exe ba211925f478dc1f052dabff6b2f79ec 0
15. settdebugx.exe 6a0455f0f540568d085db66b71803cfa 0
16. wscsvc32.exe 11e226d9e5aa6dbc1f1b88bcca5dcd5f 0
17. twunk_32x.exe 4cef8d106ee726d4fdb7774940b792f3 0
18. settdebugx.exe f80b61f32694dea690315e3b8a4e1388 0
19. settdebugx.exe 8c4281575d7ad379127835f6783e3b2c 0
20. winhbt.exe 528e550562c2acc02885c29dca6e092c 0
21. cliconfg64.exe e426729030aebc15a65994819dce721f 0
22. winhlp64.exe 612b07594fc7b4b031db01c5a133d330 0
23. mplay32xe.exe 550d82300b5126d7b00cf4aede871d7e 0
24. mplay32xe.exe dabceb372c2f0c2866ae8cb9ab9db418 0
25. wsdkrlxp.exe b863bbb6f80af43484f1ec384f36f0ef 0
26. D.tmp 3f3440ea64eee1ddbe1a1a6b063105b9 0
More files

Registry Details

Backdoor.TDSS may create the following registry entry or registry entries:
Regexp file mask
%SystemRoot%\System32\TDSS[RANDOM CHARACTERS].dat
%SystemRoot%\System32\TDSS[RANDOM CHARACTERS].dll
%TEMP%\TDSS[RANDOM CHARACTERS].tmp

Trending

Most Viewed

Loading...