How to Remove Sdbot.add Worm?
Sdbot.add Worm Information:
Sdbot.add is a dangerous widely spread worm that propagates mostly through unprotected network shares found on a local network. Sdbot.add gets installed along with freeware/shareware, through peer-to-peer software or by getting downloaded from malicious websites. Once executed, Sdbot.add drops a rootkit that allows the malware developer to enter into the infected computer. Sdbot.add also runs a backdoor controlled through the IRC network. This backdoor gives the attacker unauthorized remote access to a infected computer and allows to control it. Sdbot.add secretly runs on every Windows startup. Users with an Sdbot.add infection on their system will experience slow computer and network speeds. So it is important to remove Sdbot.add as soon as you find it on your computer.
Manual Removal
Note: If you are not proficient with computer, it’s suggested that you backup your registry before manually removing Sdbot.add Worm. And double check the entries that you are going to delete, or your computer can’t work for missing some files.
Step 1: End its process by opening Task Manager.
lockx.exe
Step 2: The registry entries you need to delete:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\stratas=lockx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\stratas=lockx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\stratas=lockx.exe
Step 3: Files you need to delete:
lockx.exe
xz.bat
msdirectx.sys
Please, be aware that manual removal of Sdbot.add Worm is a cumbersome task and can not always ensure complete removal of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. That’s why it’s strongly recommended automatic removal of Sdbot.add Worm, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.
Automatic Sdbot.add Worm Removal:
1. Restart your computer and keep pressing F8 Key before Windows launches. Use the arrow keys to select the “Safe Mode with Networking” option, and then hit ENTER Key to continue.
2. Download Spyware Cease (Spyware Cease review), install it and update its database to the latest. After that, restart your computer so as to make Spyware Cease fully functional. Repeat Step 1 into Safe Mode and run an Online Scan of your computer so that Spyware Cease can detect all potential malware in your system.
NOTE: If you have problem installing Spyware Cease, you can download this correction script, unzip it and then double click to run it. It will correct your registry settings that the virus has modified. Then double click the program and finish the installation.
3. After the Online Scan finishes, click “Details” for the malware detected to make sure that your important data are not infected and removed. Ignore or select the scan result and click “Remove” to remove the threats. Reboot your computer and let Spyware Cease delete all detected virus.
4. Click to repair your corrupted registry
Why should you need to repair the registry?
As we all know, virus and Trojans modify and destroy system registry and make the computer malfunction so that the computer will not perform normally. Even if the virus and Trojans are removed, the registry is still destroyed or modified, so the computer still has problems. That’s the very reason why you need to repair the registry. At the meanwhile, some virus and Trojans leave some DLL files in the registry and this will cause strange DLL errors and affect the computer performance.
To make your computer run as perfectly as before or much faster than before:
1. Download and install Multi-Awarded Registry Tool.
2. Run a full scan of your registry.
3. Click “Repair Problems” and repair all errors detected.
After these 3 easy steps, your computer will run much faster than before within minutes!
No related posts.