W32/Sdbot-DJC

Category: Viruses and SpywareProtection available since:04 Dec 2007 17:10:33 (GMT)
Type: Win32 wormLast Updated:04 Dec 2007 17:10:33 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Sdbot-DJC is a worm for the Windows platform.

When first run W32/Sdbot-DJC copies itself to <System>\alg.exe and creates the following files:

<Windows>\klog.dat

The following registry entries are created to run alg.exe on startup:

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2bf41072-b2b1-21c1-b5c1-0305f4155515}
StubPath
<System>\alg.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
alg
<System>\alg.exe