Home Spyware Database "Backdoor.SDBot Removal Guide"

Backdoor.SDBot Removal Guide

Backdoor.SDBot Description

Backdoor.SDBot Automatic Detection (Recommended)

Is your PC infected with Backdoor.SDBot? To safely & quickly detect Backdoor.SDBot, we highly recommend you...

Download SpyHunter's* Malware Scanner.

Backdoor.SDBot Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove Backdoor.SDBot Processes

Remove the "Backdoor.SDBot" processes files:
mslsrv.exe winsystem.exe Explorer .exe scost.exe
Read more on How to kill Backdoor.SDBot Processes

Step 2 : Use Registry Editor to Remove Backdoor.SDBot Registry Values

Locate and delete "Backdoor.SDBot" registry entries:
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Windows Explorer SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\wincfg Software\Microsoft\Windows\CurrentVersion\RunOnce\wincfg SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Update
Read more on How to Remove Backdoor.SDBot Registry Entries

Step 3 : Use Windows Command Prompt to Unregister Backdoor.SDBot DLL Files

Search and unregister "Backdoor.SDBot" DLL files:
wupdmgr.dll
Read more on How to Remove Backdoor.SDBot DLL Files

Step 4 : Detect and Delete Other Backdoor.SDBot Files

Remove the "Backdoor.SDBot" processes files:
mslsrv.exe winsystem.exe lpdriver.sys Explorer .exe wupdmgr.dll Windows Explorer scost.exe wincfg Microsoft Update
Read more on How to Delete Harmful Files

Step 5 : View the Backdoor.SDBot Components with its MD5s

Remove the "Backdoor.SDBot" components:

File Name	File Size	MD5
wupdmgr.dll	4096	5fc0642bdacc702470e444de2d744f37
malware.exe	47612	da17448779269941d9fb4ec23ae0d666
winhost.exe	30720	f387da8cffb35e68974ef7b85411726f
video.exe	311296	4681158d61ad281a48a6d6555b9bae80
mslsrv.exe	78848	94b6d3cf260f2521be750377075b4d4f
lsass.exe	38749	5b224a4d2f2597e5d945e23611117f24
~2.exe	12832	55b5ff64f9be0550dce1c706e4062c8d
scost.exe	47612	da17448779269941d9fb4ec23ae0d666
Explorer .exe	12832	55b5ff64f9be0550dce1c706e4062c8d
mslsrv32.exe	51200	3abd65c102fc2e00a52824ccec438673
msdriver32.exe	57344	356139aa2bf83931531567661310aebe
csrss.exe	335872	6b13a249cf1020bb495902fa886e6c06
~4.exe	12832	6baed5ccc533405f791e413de7b569ad
libsysmgr.exe	97795	e343dc2d74a99cf5a584075d81173111
Explorer .exe	12832	55b5ff64f9be0550dce1c706e4062c8d
winsystem.exe	33792	c3dca9f74cec5a2ee31ae1a8d084906b
smss.exe	40960	6e2c471b84ba878bcd6383d9ef57f3a7
Explorer .exe	12832	55b5ff64f9be0550dce1c706e4062c8d
atlah.exe	9216	07b4650663e4812b1576081697f4d7ce
Explorer .exe	12832	55b5ff64f9be0550dce1c706e4062c8d
330.exe	24064	00765050b56fc8687e22262746d699c1
rdfhost.exe	1171456	6bce0ad05a648d0c271f93f2e7cb4abd

Back to Top

Site Disclaimer

Publication Date: Mon Feb 27 2007 11:20:18

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top