Hi Zwabbe,
The SDBot seems to run services at start-up which make it difficult for avast! to remove, even during a bootime scan. (The signature for this malware is avast!'s definitions.)
http://forum.avast.com/index.php?PHPSESSID=0814327f4953f2248691b29063a052e3&topic=6410.msg49609I'd recommend Trend Micro Sysclean. If necessary, download the files on another computer. Extract the Zip file and copy to a CD. Start your computer in safe mode, copy the files to your desktop and run from there.
If you are not a Trend Micro customer please download the following file.
http://uk.trendmicro-europe.com/enterprise/support/tsc.phpFor the TSC package to be effective, you must download and use the latest pattern file. Place the pattern file in the same folder as the Trend Micro System Cleaner Package.
http://uk.trendmicro-europe.com/enterprise/support/pattern.phpThen run a boot time scan with avast! if supported on your system? (Right click on the scanner screen and select 'schedule a boot time scan'- set the default action to move to chest if you have a cordless keyboard because it won't work during the scan.)
If you are concerned about possible other malware/spyware infections, please run the following scans:
Ewido (XP'Win2000 only)
http://www.ewido.net/en/ and/or a-Squared
http://www.emsisoft.com/en/After that, download, install, update and scan with the following programs, preferably in safe mode (tap F8 while booting.)
Ad-Aware
http://www.majorgeeks.com/download506.htmlSpybot Search & Destroy
http://www.safer-networking.org/When you have finished, make sure you visit Microsoft Update and download all the critical updates, as this infection may be a sign of an operating system with unpatched security vulnerabilities.
Good luck!
