Can't Remove Win32:SdBot-194-B (Trj)

Viruses and worms
1

avast reported the following virus on my computer:

Virus name: Win32:SdBot-194-B (Trj)
File name C:\DOCUME-1\ADMINI -1\LOCALS-1|temp\rivulmahuw.exe
VPS version: 0431-2, 07/29/2004

The computer is running Windows 2000 Pro, and avast version 4.1.418 but it is unable to Repair, Delete, Rename, or Move to Chest the infected file. Can anybody give me anymore information on how to remove this virus? Thanks!

Tommy

2

Hi,

close all programs and browser windows and then go
control panel → Internet options → delete files → check Offline files deletion → OK
repeat this for all users, if necessary…

reboot to safeMode and check if the file is gone… or delete it there, if necessary…

Info:
VGREP

→ This strongly implies that you don’t have all windowsupdates and/or are careless with fileSharing/IRC

Please APPLY all (important and/or security-related) Windowsupdates immediately !!
or it will always come back…

also read link below “VirusRemoval”, especially the BACKDOOR-section, and change all your passwords… :wink: :wink: