Virus: SDBOT (Bling.exe)

[comnetlimited]

My friends PC (win2000 SP4) is infected with a Virus. This virus, as we read on the internet (

http://www.sophos.com/virusinfo/analyses/w32sdbotoh.html)

and (

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SDBOT.UJ&VSect=T)associate

with W32/SDbot virus.

It terminates processes such as Task Manager, msconfig and regedit, its symtoms.

We have installed The Latest version of AVG (which is the ONLY anti Virus software we are allowed) but it did not detect it. We tried manually by renaming the task-mananger and ending the "bling.exe" process and delete values from registry (15 values) but when connecting to network it came again.

Also restart on safe mode and run AVG Test but still it did not detect any virus.


We install the latest win2000 security patch too but seem to fail us.

I will really appreciate any help you provide.

Thank you.

Marsh

 

[bfralia]

Go to

http://vil.nai.com/vil/averttools.asp

and download the Stinger tool. It should clean it for you.

 

[comnetlimited]

I will download these tool and let you know of the results

 

[comnetlimited]

I will download these tool and let you know of the results

Thank you for your help.

 

[JoeFrish]

try going here

http://housecall.trendmicro.com/housecall/start_corp.asp

if trend micros detects it, this is a free online trend micros virus scan, will also remove the virus if it is found hope that helps -Joe