I recently got a virus called BackDoor.SdBot.OUW and I am looking for a way to remove it. AVG could not heal it or move it to vault and it was not in the Virus Encyclopedia. I searched google and found out I have to disable system restore and there was a very detailed guide on how to do it. (http://www.microsoft.com/windows2000/community/centers/management/sysrestore_faq.mspx#EUH) Now, the problem is that i can not find the "System Restore" tab. On a picture, I think i saw around 7 tabs, while I have only 5. (Not sure of the English names of these, but something like: "General", "Network ID", "Hardware", "User Profiles" and "Advanced")If anyone has tips about the virus itself that would also be appreciated.

Windows 2000 does not have System Restore features similar to Windows XP.

i_XpUser

Any idea why AVG can not remove it then and how to fix it? Thanks for fast answer.

Geir, Try starting your computer in SAFE mode then run a virus scan. Removal Info at the links below.

http://www.symantec.com/avcenter/venc/data/backdoor.sdbot.html

http://www.pchell.com/virus/sdbot.shtml

Tufenuf

Maybe this will help?.

Life is more painless for those who are brainless.

Thanks for the tip, Tufenuf. Ran a virus scan in safe mode, took a while but removed the virus and enabled me to edit the register.

Jennifer, I can't find those values in my register are you sure it's the right link? I searched the register and they didn't appear, and I looked in the entries. Now, I'm not experienced with this sort of thing, but "MsMon32"="MsMon32b.exe" is supposed to be under "Value", right? There was a value that was not given or something like that, named standarad, but that's probably supposed to be there isn't it?

Thanks for answers=)

Are you referring to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (and so forth)?

If so, they are on all Windows systems. You should find all your running items in the one above. If the particular values given on the website are not present then fine, you don't want them.

Website link is fine. Symantec = Norton and quite reliable.

DerekW