Re: tools: sdra64 virus?

Subject: Re: tools: sdra64 virus?
From: beelia <beelia -at- gmail -dot- com>
To: Gene Kim-Eng <techwr -at- genek -dot- com>
Date: Wed, 15 Apr 2009 19:40:12 -0700

Greg, if the Spybot fix from bleepingcomputer doesn't work, there's a
"removal tool" here:

http://www.virusremovalguru.com/?p=1669

Can't vouch for it, though.

Good luck.

Bee

On Wed, Apr 15, 2009 at 10:57 AM, Gene Kim-Eng <techwr -at- genek -dot- com> wrote:

> So did you actually remove this file from your computer, or just disable
> it in startup using msconfig? If the latter, that's just the standard
> warning Windows gives anytime you disable a startup program until you
> get rid of it (msconfig is meant to be used for diagnostic purposes, not
> as a permanent startup control). I don't have Vista and the XP
> equivalent of that standard warning reads differently, but it still
> sounds like the same thing to me.
>
> You need to actually remove the virus from the computer and then clean
> the registry to strip out its tracks, not just disable it.
>
> I usually turn first to bleepingcomputer.com for info on new malware and
> viruses. This is what's on the site for this one:
>
> http://www.bleepingcomputer.com/forums/topic211957.html
>
> Gene Kim-Eng
>
>
> ----- Original Message -----
> From: "Gregory P Sweet" <gps03 -at- health -dot- state -dot- ny -dot- us>
> > Just wondering if anyone has dealt with the sdra64.exe virus on a
> > Vista
> > machine. I caught when the machine was infected and shut down my
> > Internet
> > connection immediately, ran windows defender which found and cleaned
> > the
> > virus. The yesterday Windows seemingly forgot who it was and started
> > reporting that it was not genuine, which being an OEM copy installed
> > by
> > DELL I knew it was. Working through the resolution of that issue, I
> > remove
> > some stuff from the start up process, and upon reboot got an error
> > message
> > that sdra64.exe had stopped working and asking if I wanted to debug. I
> > know, classic windows, reports that the stopped virus is an error. So
> > i
> > searched for sdra64.exe and it appears to be a particularly nasty
> > virus but
> > I cannot find anything about it on Symantec or Microsoft.
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> ComponentOne Doc-To-Help 2009 is your all-in-one authoring and publishing
> solution. Author in Doc-To-Help's XML-based editor, Microsoft Word or
> HTML and publish to the Web, Help systems or printed manuals.
> http://www.doctohelp.com
>
> Help & Manual 5: The complete help authoring tool for individual
> authors and teams. Professional power, intuitive interface. Write
> once, publish to 8 formats. Multi-user authoring and version control!
> http://www.helpandmanual.com/
>
> ---
> You are currently subscribed to TECHWR-L as beelia -at- pacbell -dot- net -dot-
>
> To unsubscribe send a blank email to
> techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
> or visit
> http://lists.techwr-l.com/mailman/options/techwr-l/beelia%40pacbell.net
>
>
> To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com
>
> Send administrative questions to admin -at- techwr-l -dot- com -dot- Visit
> http://www.techwr-l.com/ for more resources and info.
>
> Please move off-topic discussions to the Chat list, at:
> http://lists.techwr-l.com/mailman/listinfo/techwr-l-chat
>
>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

ComponentOne Doc-To-Help 2009 is your all-in-one authoring and publishing
solution. Author in Doc-To-Help's XML-based editor, Microsoft Word or
HTML and publish to the Web, Help systems or printed manuals.
http://www.doctohelp.com

Help & Manual 5: The complete help authoring tool for individual
authors and teams. Professional power, intuitive interface. Write
once, publish to 8 formats. Multi-user authoring and version control! http://www.helpandmanual.com/

---
You are currently subscribed to TECHWR-L as archive -at- web -dot- techwr-l -dot- com -dot-

To unsubscribe send a blank email to
techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
or visit http://lists.techwr-l.com/mailman/options/techwr-l/archive%40web.techwr-l.com


To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com

Send administrative questions to admin -at- techwr-l -dot- com -dot- Visit
http://www.techwr-l.com/ for more resources and info.

Please move off-topic discussions to the Chat list, at:
http://lists.techwr-l.com/mailman/listinfo/techwr-l-chat


References:
tools: sdra64 virus?: From: Gregory P Sweet
Re: tools: sdra64 virus?: From: Gene Kim-Eng

Previous by Author: Working with developers to create EPSS
Next by Author: Re: Question for Flare Users
Previous by Thread: Re: tools: sdra64 virus?
Next by Thread: Nuance PDF Converter vs Adobe Acrobat


What this post helpful? Share it with friends and colleagues:


Sponsored Ads