BKDR_RILER.SV

BKDR_RILER.SV is a backdoor Trojan that is a component of a spam email pertaining to Tibetan. BKDR_RILER.SV is delivered via spam emails supposedly promoting Tibetan culture, which allegedly incorporate instructions on how to use the Input Method by Tibetans who might use Apple iOS 4.2 gadgets. Stating that to make Tibetan culture widespread by helping people who want to learn Tibetan language, the malicious email declare that 'Digital Tibetan' recently developed the 'Input Method' for Tibetans who wish to successfully operate Apple iOS 4.2 gadgets. BKDR_RILER.SV is spread by other malware infections, specifically TROJ_ARTIEF.EDX, and is distributed as an executable file corrupted by a file infector malware infection identified as PE_SALITY.AC. This consequently executes both payloads of BKDR_RILER.SVR and PE_SALITY.AC on the infected machine. BKDR_RILER.SV connects to a particular domain to transmit and obtain information. BKDR_RILER.SV registers its DLL component as Layered Service Provider (LSP) by creating the specific registry entry so that it can launch automatically whenever you turn your computer on. The DLL component encompasses the backdoor routines of BKDR_RILER.SV. The DLL component, at first, checks if it is inserted to any of the many processes before proceeding with execution; otherwise, it terminates.