Srizbi.sys

This page shows details and results of our analysis on the malware Srizbi.sys

Download Current DAT: 6617

Threat Detail

Malware Type: Trojan

Malware Sub-type: Win32

Discovery Date: 2007-08-06

Next Steps:

Overview
Characteristics
Removal

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Minimum DAT

5091 (2007-08-06)

Updated DAT

5761 (2009-10-04)

Minimum Engine

5.2.00

File Length

N/A

Description Added

2007-08-06

Description Modified

2008-10-01

Malware Proliferation

Characteristics

This is a detection for the rootkit component (.SYS) dropped by the Srizbi trojan.

For description of Srizbi please see the Srizbi trojan vil here:

http://vil.nai.com/vil/content/v_142902.htm

Symptoms

Method of Infection

Removal

All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).