Discovered: June 20, 2007
Updated: July 23, 2007 2:39:10 AM
Also Known As: Troj/RKAgen-A [Sophos], Rootkit:W32/Agent.EA [F-Secure]
Type: Trojan
Infection Length: 154,112 bytes
Systems Affected: Windows XP, Windows NT, Windows 2000
Trojan.Srizbi is a Trojan horse that sends spam and uses a rootkit to hide itself.
Protection
-
Initial Rapid Release version June 20, 2007 revision 001
-
Latest Rapid Release version November 19, 2009 revision 053
-
Initial Daily Certified version June 20, 2007 revision 003
-
Latest Daily Certified version November 20, 2009 revision 005
-
Initial Weekly Certified release date June 20, 2007
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Difficult
Damage
-
Damage Level: Medium
-
Payload: Sends spam.
-
Compromises Security Settings: Rootkit is able to bypass firewall and IDS systems.
Distribution
Writeup By: Kaoru Hayashi
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
