Backdoor.sdbot trojan

November 27, 2009 at 12:06:24
Specs: Windows XP

I'm fairly computer illiterate so please pardon any terminology errors: I'm in Latin America and my computer recently became infected with the backdoor.sdbot trojan. Symantec Anti-Virus deletes the trojan each time it runs but the Trojan is obviously replicating itself cause it's never really dead. I followed the Symantec solution but coudln't find any registry values that matched those listed on the Symantec website, so I didn't delete anything from the registry. My Symantec AV program says that the trojan is located at C:\DOCUME~1\Nick\LOCALS~1\TEMPOR~1\Content.IE5\ followed by 8 numbers/letters that changes each time I run the antivirus program. I assume that the trojan is responsible for the explosion of .tmp files on my desktop is filled with them. Any help would be greatly appreciated...I'd be happy to send someone a screenshot of applicable registry folders if that would help you help me determine what to delete. THANKS!!

See More: Backdoor.sdbot trojan

Report •

November 27, 2009 at 13:05:12
Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Please post the contents of both logs (in separate post) in your next reply.

Report •

November 27, 2009 at 15:35:33
if it is re-populating after a reboot it could be in your system restore. You may want to turn it off in order to remove the problem effectively with your anti-virus..

Some HELP in posting on plus free progs and instructions Cheers

Report •

Related Solutions

Ask Question