W32/Sdbot-OU is a network worm and backdoor Trojan. The worm spreads by copying itself to network shares that have weak passwords.
W32/Sdbot-OU creates a copy of itself named MAJDE.EXE in the Windows system folder and adds the following registry entries to ensure that the copy is run each time the computer restarts:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
ValuSet = MaJde.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
ValuSet = MaJde.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
ValuSet = MaJde.exe
The backdoor component of the worm attempts to connect to an IRC server and awaits commands from a remote attacker.