W32/Sdbot.worm!fn
W32/Sdbot.worm!fn is a virus with backdoor functionalities, giving attackers unauthorized access to victims' computers. W32/Sdbot.worm!fn is able to spread via poorly secured network shares, malicious web pages or the exploitation of system vulnerabilities. With the use of an IRC protocol, W32/Sdbot.worm!fn is able to connect with a remote attacker and possibly download additional malware. Users should scan their computer systems with an anti-virus program in order to locate and remove W32/Sdbot.worm!fn.
File System Details
W32/Sdbot.worm!fn may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %AppData%\sectray.exe | |
| 2. | [Drive]:\usbassistant.exe | |
| 3. | [Drive]:\removeMe%i%i%i%i.bat | |
| 4. | [Drive]:\autorun.inf |
Registry Details
W32/Sdbot.worm!fn may create the following registry entry or registry entries:
Windows Network Setup Manager = "%AppData%\sectray.exe"
[HKEY_CURRENT_USER \S-1-5-21-1454471165-926492609-839522115-500\Software\Microsoft\Windows\CurrentVersion\Run
