Win32:SdBot-g12 - Removal ??

Viruses and worms
1

Hello,

I was hoping someone might be able to help me out.

The last 2 days, I’ve been getting warnings that I have the Win32:SdBot-g12 virus on the computer (not sure how that happened).

But whenever I click repair, Avast is unable to do anything with the file.

Here are my log files for the virus/trojan, etc.

29.11.2003 15:46:08 NT AUTHORITY\SYSTEM 1024 Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\dbplugin.exe" file. 01.12.2003 12:23:17 NT AUTHORITY\SYSTEM 1052 Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\recycler\s-1-5-18\dc2.exe" file. 01.12.2003 15:42:12 NT AUTHORITY\SYSTEM 1052 Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\windows\dtaplugin.exe" file. 01.12.2003 23:37:53 NT AUTHORITY\SYSTEM 1052 Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\npdbplug.dll" file. 02.12.2003 00:07:16 NT AUTHORITY\SYSTEM 460 Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\npdbplug.dll" file.

Anyone have any suggestions in how to get rid of this off my computer??

Thanks in advance!

Tonya

2

Let avast clean them in windows safe mode.

3

if that fails try http://housecall.trendmicro.com

4

Tonya,

I just got this message as well thru running avast on what I’m reasonably confident is a safe exe file download.

did you find out anymore about this,
Max

5

max check the file here http://housecall.trendmicro.com

ActiveX must be enabled for housecall
IE 5.5 or higher

6

Thanks mate!

7

Forgot to mention. Avast has a “false alarm” on these Worm/Virus.

8

That would tie in with whats happening here, i know a lot of people who have downloaded the exe file , with no problem.
However that maybe a seprate issue to it being a “false alarm”
does it mean avast cannot detect the worm or it can, but it gives false alarms to other exe’s as well?

How can this problem be corrected?

Max

9

in the latest iAVS update my false alarm with F-Secure was fixed mabye yours is too