new user: File infected with trojan. please help

Discussion in 'malware problems & news' started by Jacel, May 23, 2004.

Thread Status:
Not open for further replies.
  1. Jacel

    Jacel Registered Member

    Joined:
    May 23, 2004
    Posts:
    1
    I ran my freedom antivirus and found "W32/Sdbot.KH" trojan in C:\WINDOWS\system32\desktop.exe. I was told to delete the file. desktop is an application and im not so sure if it's wise to delete it.
    Also, my PC won't restart or shutdown unless I use the main power button.

    Thanks.
     
  2. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
  3. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    that removal tool is for MD variant not KH. by the way SDBOT.KH is a backdoor so i suggest you delete that file immedietly. don't worry that file is not a windows native file so you can delete it. but if its resident then you won't be able to delete it. just remove it from registry from:

    HKLM\software\microsoft\windows\currentversion\run

    or

    HKLM\software\microsoft\windows\currentversion\runservices
     
Loading...
Thread Status:
Not open for further replies.