google came back with a forum to do with sdbot; however, the file was listed as "Morphine".
I saw a copy of one of the recent worms which had generated a very large number of exe's which all had previously uncaptured names. If it's not being picked up by your virus scanner, send it to their team, get another and run a scan over the computer from a known clean source, such as a BartPE bootdisk or a remote uncompromised box. On Wed, 1 Sep 2004 15:08:56 -0400 (EDT), S.A. Birl <[EMAIL PROTECTED]> wrote: > Hello all: > > Recently discovered a trojan(? - possibly a virus) called msrtwd.exe. > It's listed in the Registry as "Microsoft Update Loader" > > Does anyone know anything about this? Google doesnt offer much. > > Thanks > > Scott Birl http://concept.temple.edu/sysadmin/ > Senior Systems Administrator Computer Services Temple University > ====*====*====*====*====*====*====*====+====*====*====*====*====*====*====*====* > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
