Author Topic: win32:SdBot-545[Trj]  (Read 4697 times)

0 Members and 1 Guest are viewing this topic.

Vee

  • Guest
win32:SdBot-545[Trj]
« on: July 18, 2004, 04:01:30 AM »
I thought I cleaned the thing but it keeps putting tmp files


"C:\Documents and Settings\Name\Local Settings\Temp";
"C:\WINDOWS\Temp"

in those directories and everytime I run avast again it finds a new

trz*.tmp file in one of those two directories

where * represents a numeral or abc

what's my problem

so far I've just been moving all the tmp files to the chest and it originated as c:\windows\system32\TFTP3580

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:win32:SdBot-545[Trj]
« Reply #1 on: July 18, 2004, 09:57:29 AM »
Tried to start Avast in Windows safe mode? Or use an Onlinescanner:

http://www.bul-online.de/av/onlinescan.shtml

If that does not solve your porblem, feel free to post a hijackthis log: www.hjt.klaffke.de/en
MfG Ralf

Vee

  • Guest
Re:win32:SdBot-545[Trj]
« Reply #2 on: July 27, 2004, 01:23:24 PM »
oddly enough I got rid of it then by just doing a clean of my temp dirs with window washer but its back again sorta cos I turned the protective gear off, um yeah I'll try the safe mode thing

when I got rid of it before or thought I did, the scanner couldn't find it again after that and nor could an online scan, I used housecall at whatever site thats at.

no one out there know of  a cleaner for it.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:win32:SdBot-545[Trj]
« Reply #3 on: July 27, 2004, 01:32:29 PM »
Since the infected files are in one of your temp folders, it is very likely a application (virus/trojan/spy-/adware etc) places them there. I suggest you click on the link in my signature and do as explained there. See if that solves the problem. Don't forget to let us know ofcourse  ;)

Vee

  • Guest
Re:win32:SdBot-545[Trj]
« Reply #4 on: July 28, 2004, 07:45:09 AM »
I've ran hijack this and I'm familiar enough with my system to know that nothing stands out as unusual within it

so I didn't copy/paste the log - tho today my av can't find the trojan/virus anyway