Win32:SdBot-g12 - Removal ??

[tmellon]

Hello,

I was hoping someone might be able to help me out.

The last 2 days, I've been getting warnings that I have the Win32:SdBot-g12 virus on the computer (not sure how that happened).

But whenever I click repair, Avast is unable to do anything with the file.

Here are my log files for the virus/trojan, etc.

29.11.2003 15:46:08   NT AUTHORITY\SYSTEM   1024   Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\dbplugin.exe" file.  
01.12.2003 12:23:17   NT AUTHORITY\SYSTEM   1052   Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\recycler\s-1-5-18\dc2.exe" file.  
01.12.2003 15:42:12   NT AUTHORITY\SYSTEM   1052   Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\windows\dtaplugin.exe" file.  
01.12.2003 23:37:53   NT AUTHORITY\SYSTEM   1052   Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\npdbplug.dll" file.  
02.12.2003 00:07:16   NT AUTHORITY\SYSTEM   460   Sign of "Win32:SdBot-g12 [Trj]" has been found in "C:\WINDOWS\npdbplug.dll" file.

Anyone have any suggestions in how to get rid of this off my computer??

Thanks in advance!

Tonya

[raman]

Let avast clean them in windows safe mode.

[.: Mac :.]

if that fails try http://housecall.trendmicro.com

[Max]

Tonya,

I just got this message as well thru running avast on what I'm reasonably confident is a safe exe file download.

did you find out anymore about this,
Max

[.: Mac :.]

max check the file here http://housecall.trendmicro.com

ActiveX must be enabled for housecall
IE 5.5 or higher

[Max]

Thanks mate!

[raman]

Forgot to mention. Avast has a "false alarm" on these Worm/Virus.

[Max]

That would tie in with whats happening here, i know a lot of people who have downloaded the exe file , with no problem.
However that maybe a seprate issue to it being a "false alarm"
does it mean avast cannot detect the worm or it can, but it gives false alarms to other exe's as well?

How can this problem be corrected?

Max

[.: Mac :.]

in the latest iAVS update my false alarm with F-Secure was fixed mabye yours is too