Backdoor.SDBot.Gen

[scriptkiddie18]

I tried searching symantec for this virus and I found it.
But the problem is they dont say how to get rid of it like for other viruses.
I also found i had Backdoor.SDBot.G on my computer and i delted the registry key of that too
Anyone got rid of it or know how to get rid of it plz I really need help.

Thank You.

[nihil]

I suggest that you search some other site such as NAI/McAFee and PC-Cillin/Trend MIcrosystems....................have a look at their instructions, and run their online scanner, which should also remove the problem.

Get AdAware 6.0 from lavasoft, update and run it, also Spybot Search & Destroy and do the same.

There you go, and that will not cost you a cent

Hope this helped

Cheers

[scriptkiddie18]

Hehe I like free :-)
Tx a lot

[thehorse13]

From Symantec:
http://securityresponse.symantec.com...r.sdbot.g.html

Notice this section:
The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.


Reverse the changes that the Trojan made to the registry, and then restart the computer.
Update the virus definitions.
Run a full system scan and delete all the files detected as Backdoor.Sdbot.G.

For specific details on each of these steps, read the following instructions.

1. Reversing the changes that the Trojan made to the registry

CAUTION: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:

"Svost Loader"="svost.exe"

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunServices

In the right pane, delete the value:

"Svost Loader"="svost.exe"

Exit the Registry Editor.
Restart the computer.

[nihil]

Hi scriptkiddie18,

There are lots of folks who don't like scumware, or the scum that produce it, and will help private individuals in the fight.

The AdAware and SpyBot Search & Destroy should be a part of your system. Please do not forget to use their built in update mechanisms.........they update regular

Make sure that you get a firewall ZoneAlarm and Agnitum are free to private users ones that are quite good.

Please pass this advice on to your friends

Be safe, stay safe

Cheers,

Johnno

[Szafran]

how about booting in safe mode and deleting the reg key.

[nihil]

Not a bad idea there szafran!

But first run your AV and other software in safe mode..............In some circumstances they will find more, as you have had to launch them "fresh", when some scumware will kill them in the POST cycle?

Again.........nice idea

Cheers


why didn't I think of that.................getting slow in my old age

[scriptkiddie18]

Thank You all for advice.
Just to inform you, I did get rid of the trojans
It turns out i had 3 of them not only 1
Thanks again.

P.S. AdAware helped me the most it runs fast and finds many)

Thank You all again and ill pass the message to my friends when they need it

[MrDoscy]

I have just started using Spy Sweeper and found it to be pretty good