new user: File infected with trojan. please help

Discussion in 'malware problems & news' started by Jacel, May 23, 2004.

Thread Status:
Not open for further replies.
  1. Jacel

    Jacel Registered Member

    Joined:
    May 23, 2004
    Posts:
    1
    I ran my freedom antivirus and found "W32/Sdbot.KH" trojan in C:\WINDOWS\system32\desktop.exe. I was told to delete the file. desktop is an application and im not so sure if it's wise to delete it.
    Also, my PC won't restart or shutdown unless I use the main power button.

    Thanks.
     
  2. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
  3. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    that removal tool is for MD variant not KH. by the way SDBOT.KH is a backdoor so i suggest you delete that file immedietly. don't worry that file is not a windows native file so you can delete it. but if its resident then you won't be able to delete it. just remove it from registry from:

    HKLM\software\microsoft\windows\currentversion\run

    or

    HKLM\software\microsoft\windows\currentversion\runservices
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.