New virus found

??? I had discovered a new variants of sdbot virus, but there not a single we site had post this virus. This virus will repropulate itself to the registry and system32 folder. The file name is sdkc0re.exe.exe or sdkc0r3.exe. It will slow down you computer lead the application hangs. You can locate the files in the registry [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa"SDKcore Update Components2"=“SDKC0R3.exe”];[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole"SDKcore Update Components2"=“SDKC0R3.exe”];[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"SDKcore Update Components2"=“SDKC0R3.exe”];[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"SDKcore Update Components2"=“SDKC0R3.exe”]

Had anyone found any solutions to this virus?
Thanks…

I Googled this up for you : http://www.sophos.com/virusinfo/analyses/w32sdbotwc.html

Bye :slight_smile:

Can you send the samples to virus@avast.com ?
You can zip and password the files… Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.

See also:

http://greyknight17.com/bb/index.php?topic=1189.msg6336

scroll down the page and find what you are searching for.

Ciao=Bye

:wink: