Member Panel

Hey everyone.

About a few hours ago, after updating Zone Alarm, some weird stuff started to happen. This sysmgr.exe file kept trying to access the Internet.

Here is my log:

Nothing to bad , just one of them. It's a variant of W32/Sdbot-OO and it is an IRC backdoor.



Boot in safemode and then click Start>Run and type in: services.msc

Click OK

In the Services window find: sysmgr64

Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK
Open HJT and click config > misc tools > “delete an NT service”
Copy and past: sysmgr64

Click OK.

Then fix this line with hjt:

Then delete the file in bold and youre done. O0

Well, that fixed it. Thanks, Joe! O0

Youre welcome.


And marked as Fixed.