Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Jan 14, 2010 | Updated Sep 15, 2017

VirTool:WinNT/Rootkitdrv.HB

Detected by Microsoft Defender Antivirus

Aliases: Rootkit.Win32.Ressdt.ns (Kaspersky) W32/Rootkit.BEIK (Norman) Rootkit.Ressdt.HS (VirusBuster) Rkit/Ressdt.NS (Avira) Rootkit.17822 (BitDefender) Win32/Rootkit.Ressdt.NAS (ESET) Rootkit.Win32.Ressdt (Ikarus) Rootkit/Lineage.JQY (Panda) Rootkit.Win32.Ressdt.ss (Rising AV) TROJ_RESSDT.BQ (Trend Micro)

Summary

VirTool:WinNT/Rootkitdrv.HB is a kernel-mode malicious rootkit. It is used to interfere with the performance of "Kaspersky Antivirus", so that the malware using this tool may avoid detection by this antivirus program.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Follow us