Trojan Horse IRC/BackDoor.SdBot.48.BK

Hi,
I have a friend who has been having many problems with her computer. She brought it over here today for me to try to find the problem. The first thing I did was install Windows SP2 on her XP machine. It seems to be running fine.

I then deleted her system works as nothing seemed to work on there. I then installed the free version of AVG Virus. It found this virus on her system, "Trojan Horse IRC/BackDoor.SdBot.48.BK" but couldn't clean it. It keeps saying to run AVG again but I always get this message.
Trojan horse IRC/BackDoor.SdBot.48.BK cannot be removed. It is located in C:/Windows/System 32/voltio.exe.

I also ran House Call but it didn't take the problem away.

Would I be safe just deleting the "voltio.exe" file or where can I go to look for a remover.

Any help is appreciated.

Jean

 

Yes, you should be safe just deleting the file, if it will allow you to. There may also be some registry run entries associated with it, and if it is running as a process, you will need to end task on it first. Should you get it deleted, disable system restore, empty the recycle bin and reboot. You can re-enable SR after getting back in windows. If you get an error message about the file not being found upon logon, you will need to remove the run entries. A HijackThis scan will show them and allow removal.

 

Thank you for replying to my post. Great, I did delete the file and also ran a registry cleaner so I think this was taken care of. I've ran the AVG virus checker after running SpyBot and AdAware and there is nothing coming up on her computer.

I do think there must be other problems with the computer as when I'm trying to update the Windows program, the computer hangs up. I don't know what could be causing this and it is very annoying. There must be other problems with it and if I find anything causing this I will write back for more advice.

Thank you.

Jean

 

Not sure what you mean by updating the windows program. You stated in your first post that you had already installed SP2. At any rate, any error messages when it locks up? Have you checked the event logs for clues?

 

I'm sorry I didn't make myself clear. I did try to download SP 2 twice and each time they hung up or I got an error message. I finally uninstalled it and went back to the SP 1.

You said, "Have you checked the event logs for clues? "

No, I haven't as I don't know how to do this.

I brought my friend's computer back today and if she continues to have lockups (and I'm sure she will) she will take it to a professional for help.

Thanks.

Jean