Know Your Malware: SikBot Removal


SikBot is an IRC-controlled backdoor, which gives the attacker unauthorized remote access to the compromised computer. The intruder can control the infected system, retrieve system information, steal user sensitive data and launch Distributed Denial of Service (DDoS) attacks against specified hosts. SikBot secretly runs on every Windows startup.

Related files: slay7383.exe

SikBot properties:
Allows remote user connection
Connects itself to the internet
Hides from the user
Stays resident in background Remove SikBot, removal instructions

Linked by shanmuga Monday, 5th December 2005 7:19AM