i appear to hav received a virus from the kazaa network. one of those .exe files that look like something you want to download but are just a fake. it has replicated itself in teh kazaa shared directory and if these files are deleted they are replaced quickly. defender virus scanner shows it to be 'irc.sdbot.5' virus, while trend micro's pc-cillin does not detect it. wen logging in to xp home it opens cmd.exe and does a few things, it then prompts for an internet connection to connect to the site 'm00c0w.organiccrap.com. is there any way to get rid of it without paying for an anti-virus program?

If you do not want to pay for an antivirus program, get Grisoft's AVG 6.0. At CNET Downloads there is a free virus protection program made specifically for Kazaa. I have know idea how effective it is, as I would not use Kazaa, unless they paid me. One thing for sure, to blindly downlaod and not scan the files downloaded from Kazaa is a "High Risk Activity". Have you tried Symantec's on-line virus scan to see what it finds? Then check out their removal tools/instructions for snbot.5.

You have the Klez worm..find a good eraser program i guess.

I would say stop being a cheapskate and get a good Antivirus program quick, it might cost £30 but its alot cheaper than a new computer, remember this saying : " You get what you pay for ". Neo

....i would do as Neo says....and if you use any peer to peer it is essential to have: 1. A good upgradeable AV programme. 2. A reliable "firewall". .....and follow good computing practises.

thanks for that, all help is appreciated

Here's the culprit... http://sdbot.n3.net or http://wintermarket.org:81/~sd/ Add's Run and RunServices registry keys and puts a file in windows system folder called something similar sycfgi386.exe or sycfg32.exe.