msnmessengerupdate.exe - Dangerous
msnmessengerupdate.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Also known as Backdoor.SdBot.kd, W32/Spybot.worm.gen.b, Win32/SpyBot.WW, Backdoor.IRC.Bot
Upon execution Troj/SdBot-BI displays the fake error message
"'Error-38427 A valid dll file was not found, Windows is now deleting file."
In order to run automatically when Windows starts up the Trojan copies itself to the file:
mmsnmessengerupdate.exe in the Windows system folder,
and adds the following registry entry to ensure it is started on computer logon:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svshostdriver = msnmessengerupdate.exe
You can easy remove it with RegRun.