Threat Search: 

ThreatExpert's Statistics for Rootkit.Small!sd6 [PC Tools]:

Rootkit.Small!sd6 [PC Tools] is also known as:
Threat AliasNumber of Incidents
Rootkit.Win32.Small.pz [Kaspersky Lab]360
Virus.Rootkit.Win32.Small [Ikarus]330
Hacktool.Rootkit [Symantec]321
Rootkit.Win32.Small [Ikarus]269
TrojanDownloader:Win32/Perkesh.gen!A [Microsoft]150
Mal/Generic-A [Sophos]103
Troj/Agent-FYA [Sophos]100
Trojan Horse [Symantec]89
Generic Downloader.x [McAfee]88
Rootkit.Win32.Small.ov [Kaspersky Lab]88
Generic.dx [McAfee]31
Win-Trojan/Rootkit.6912 [AhnLab]30
Rootkit.Win32.Small.ho [Kaspersky Lab]24
Rootkit.Win32.Small.hp [Kaspersky Lab]24
Rootkit.Win32.Small.hq [Kaspersky Lab]24
Rootkit.Win32.Small.hr [Kaspersky Lab]24
Rootkit.Win32.Small.hs [Kaspersky Lab]24
Rootkit.Farfli.GEN [PC Tools]15
VirTool:WinNT/Rootkitdrv.LX [Microsoft]15
Rootkit.Win32.Small.fm [Kaspersky Lab]6
Rootkit.Win32.Small.fn [Kaspersky Lab]6
Rootkit.Win32.Small.fo [Kaspersky Lab]6
Rootkit.Win32.Small.fp [Kaspersky Lab]6
Rootkit.Win32.Small.fq [Kaspersky Lab]6
Rootkit.Win32.Small.sy [Kaspersky Lab]4
Trojan-Dropper.Win32.Opachki [Ikarus]4
TrojanDropper:Win32/Opachki.A [Microsoft]4
Backdoor:Win32/Haxdoor [Microsoft]3
Win32.SuspectCrc [Ikarus]3
Generic Dropper [McAfee]2
Generic PWS.o!sys [McAfee]2
Rootkit.Win32.Small.ee [Kaspersky Lab]2
Rootkit.Win32.Small.bs [Kaspersky Lab]1
Rootkit.Win32.Small.uj [Kaspersky Lab]1
Trojan.Goldun [Symantec]1
VirTool:Win32/Tinxy.A [Microsoft]1

Rootkit.Small!sd6 [PC Tools] is known to be created as:
%Programs%\startup\chkdisk.dll
%System%\autochk.dll
%System%\drivers\nfr.sys
%System%\nspass0.sys
%System%\nspass1.sys
%System%\nspass2.sys
%System%\nspass3.sys
%System%\nspass4.sys
%System%\vbagz.sys
%Temp%\msb.dll
%UserProfile%\protect.dll
%Windir%\temp\msb.dll
Notes:
  • %Programs% is a variable that refers to the file system directory that contains the user's program groups. A typical path is C:\Documents and Settings\[UserName]\Start Menu\Programs.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.