W32/Sdbot-SC

Category: Viruses and Spyware
Type: Win32 worm
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Sdbot-SC is an IRC backdoor Trojan with spreading capability.

When run W32/Sdbot-SC copies itself into the Windows system folder as dSAFsqs.exe and sets the following registry entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Answer Problem
dSAFsqs.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Answer Problem
dSAFsqs.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Answer Problem
dSAFsqs.exe

download Try Sophos products for free
Download now