The Tigger/Syzor Trojan

[SysAdMini]

http://voices.washingtonpost.com/securityfix/2009/02/the_t-i-double-guh-r_trojan_ic.html?wprss=securityfix

http://mnin.blogspot.com/2009/02/why-i-enjoyed-tiggersyzor.html

http://www.malwaredomainlist.com/mdl.php?search=update-product.net&colsearch=All&quantity=50

[SysAdMini]

Finding Tigger/Syzor Infections (and others) with Detached SystemThreads
http://mnin.blogspot.com/2009/03/finding-tiggersyzor-infections-and.html

[dash_neghab]

Any samples of this worm?

[sowhat-x]

Up until early March,someone could grab samples from update-product.net.
We don't archive samples locally though,maybe OffensiveComputing could be of help in that case...