win32:SdBot-545[Trj]

I thought I cleaned the thing but it keeps putting tmp files

“C:\Documents and Settings\Name\Local Settings\Temp”;
“C:\WINDOWS\Temp”

in those directories and everytime I run avast again it finds a new

trz*.tmp file in one of those two directories

where * represents a numeral or abc

what’s my problem

so far I’ve just been moving all the tmp files to the chest and it originated as c:\windows\system32\TFTP3580

Tried to start Avast in Windows safe mode? Or use an Onlinescanner:

http://www.bul-online.de/av/onlinescan.shtml

If that does not solve your porblem, feel free to post a hijackthis log: www.hjt.klaffke.de/en

oddly enough I got rid of it then by just doing a clean of my temp dirs with window washer but its back again sorta cos I turned the protective gear off, um yeah I’ll try the safe mode thing

when I got rid of it before or thought I did, the scanner couldn’t find it again after that and nor could an online scan, I used housecall at whatever site thats at.

no one out there know of a cleaner for it.

Since the infected files are in one of your temp folders, it is very likely a application (virus/trojan/spy-/adware etc) places them there. I suggest you click on the link in my signature and do as explained there. See if that solves the problem. Don’t forget to let us know ofcourse :wink:

I’ve ran hijack this and I’m familiar enough with my system to know that nothing stands out as unusual within it

so I didn’t copy/paste the log - tho today my av can’t find the trojan/virus anyway