W32/Sdbot-TB

[Mobo]

Name: W32/Sdbot-TB
Type: Win32 worm
Date: 7 January 2005

A virus identity (IDE) file which provides protection is
available now from the Sophos website, and will be incorporated
into the February 2005 (3.90) release of Sophos Anti-Virus.

Customers using Enterprise Manager, PureMessage and any of the
Sophos small business solutions will be automatically protected
at their next scheduled update.


At the time of writing, Sophos has received a small number of
reports of this worm from the wild.


Information about W32/Sdbot-TB can be found at:
http://www.sophos.com/virusinfo/anal...32sdbottb.html

This IDE file also includes detection for:

Troj/StartPa-EH
http://www.sophos.com/virusinfo/anal...startpaeh.html
W32/Sdbot-TE
http://www.sophos.com/virusinfo/anal...32sdbotte.html
Troj/Cblade-G
http://www.sophos.com/virusinfo/anal...ojcbladeg.html
Troj/Multidr-BK
http://www.sophos.com/virusinfo/anal...multidrbk.html
Troj/StartPa-EG
http://www.sophos.com/virusinfo/anal...startpaeg.html

Download the IDE file from:
http://www.sophos.com/downloads/ide/sdbot-tb.ide

Download all the IDE files available for the current version of

Sophos Anti-Virus in a single compressed file. The file is

available in two formats:



Zip file:

http://www.sophos.com/downloads/ide/ides.zip



Self-extracting file:

http://www.sophos.com/downloads/ide/ides.exe



Read about how to use IDE files at

http://www.sophos.com/downloads/ide/using.html