Ihmeellinen kansio!!

Ei ainakaan minun XP home edition käyttiksessä ole tuon nimistä kansioita.

Lue lisää:
http://www.symantec.com/avcenter/venc/data/backdoor.sdbot.html

Ja koska näitä on useampia niin voit löytää sen oikean tästä:
http://www.symantec.com/avcenter/venc/auto/index/indexB.html etsi alempaa Backdoor.Sdbot, B - I ja L

Ohjeet poistoon löytyy näiltä sivuilta...!

On ilmeisesti ton madon/viruksen luoma kansio...


W32/KWBot-E
Type
Win32 worm

Detection
Detected by Sophos Anti-Virus since April 2003.

Description
W32/KWBot-E is a worm which spreads via file sharing on KaZaA and iMesh P2P networks.

W32/KWBot-E copies itself to the Windows system folder as XMW32.EXE and creates the folder sCache32. W32/KWBot-E then runs continuously in the background and periodically copies itself to sCache32 using the following filenames:

AC3-MP3 converter.EXE
ACDSee 5.5b.EXE
ACDSee Classic 2.79.EXE
Ad-aware 6.5 (new).EXE
Adobe Acrobat Reader 5.6.EXE
Adobe PhotoShop 7.1 crack.EXE
All Editor 3.0b.EXE
AOL Instant Messenger 6.1.EXE
Auction Sentry (new).EXE
AudioLabel CD Labeler 3.0 ( crack).EXE
Battlefied1942 Pack4 (crack bloodpatch).EXE
BearShare 5.1.1.EXE
C&C Generals Pack2 (new patch).EXE
Complete UK Music Database 4.2.EXE
DirectDVD 4.9.EXE
DivX Bundle 6.2.EXE
DivX edit (new).EXE
DivX Video Bundle 5.5.1.EXE
Download Accelerator Plus 6.3.EXE
DvD Rip guide ( tools) st0rm.EXE
Dynamite Downloads.EXE
Easy CD Creator Software Update.EXE
FlashFXP (keygen).EXE
FreeRip 4.30.EXE
Genie Stream 3.2.4.EXE
GetRight 5.5 crack.EXE
Global DiVX Player 2.0.1.EXE
Gothic 2 (m-patch).EXE
Grokster 2.0.EXE
Hacker Tutorial (by ph3Akz).EXE
Half-Life keygen ( ogc hack).EXE
HL keys (working).EXE
I.G.I. 2 (new crack).EXE
ICQ Lite beta (b2253).EXE
iMesh 4.1 beta.EXE
iSnipeIt 5.0c.EXE
James Bond 007 Nightfire crack.EXE
Kazaa Media Desktop 2.5.EXE
Kazaa Skins 1.8.EXE
KaZooM MP3 Kazaa Accelerator 2.5.EXE
Medal Of Honor (Allied Assault) crack.EXE
Microangelo 6.0b.EXE
mIRC 6.x addon patch.EXE
mIRC s3th war-script.EXE
Morpheus 2.6.EXE
MP3 cut pro 3.0.EXE
MSN Messenger 5.5.10.EXE
Need for Speed 6 (new cars crack).EXE
NeoNapster 3.92.EXE
Nero Burning ROM 5.8.2.4.EXE
Network Cable ADSL Speed 2.0 (beta).EXE
New Nvidia (geForce) drivers (beta).EXE
Nimo Codec Pack 9.0 (stable).EXE
Nvidia Detonator XP Drivers (Windows XP/2000).EXE
Operation Flashpoint (bloopatch).EXE
Patch Creator 3.5a.EXE
PhotoShow 3.1.EXE
Pop-Up Stopper 4.0 (beta).EXE
Ps2 to Pc tutorial ( tool).EXE
QuickTime 7.2 (new).EXE
Raven Shield 5.32 crack.EXE
RealJukebox Basic 2.8.EXE
RealOne Free Player 2.8.EXE
RemoteSpy 1.5.EXE
Sim City 4 crack.EXE
Splinter Cell crack.EXE
TitJiggle (flash game).EXE
Trillian 0.8 plugins.EXE
UniversalFlood (4.8b).EXE
Unreal2 (2.8) crack.EXE
UT2003 multi-crack (new).EXE
Warcraft3 battle.net(2.5) crack.EXE
Window Washer 4.8.EXE
WinRAR 3.8.EXE
WinZip 8.3b (crack).EXE
WinZip 9.0 SR-1.EXE
Wippit 2.1 (beta).EXE
WS_FTP LE 6.0.EXE
XViD bundle (codec tutorial).EXE

W32/KWBot-E makes the sCache32 folder shared on the KaZaA and iMesh networks by setting the following registry entries:

HKCUSoftwareKazaaLocalContentDir? = 012345:sCache32
HKCUSoftwareiMeshClientLocalContentDir? = 012345:sCache32
HKCUSoftwareKazaaLocalContentDisableSharing = 0 where ? is a value in the range 0-63.

http://www.sophos.com/virusinfo/analyses/w32kwbote.html