Backdoor.SdBot.dsi virus what is it and is it from rgss demo/host/my comp (Topic changed by Arbiter)

[Chalupa]

Recently, I came across a topic on here that showed RMXP Infected .EXE files.  I scanned mine, to come across an infected EVERY SINGLE RMXP EXE file with a DIFFERENT virus.  It is called Backdoor.SdBot.dsi, and if any one here knows more about it, ENLIGHTEN ME!

 

[bedi nik bzez emak]

;D

 

[Chalupa]

Would Uninstalling RMXP and deleting all of it's stuff get rid of it?

 

[shadow]

No, it has already spread everywhere on your PC, and it is very unlikely RMXP is the original source. You need to run virus scans or reformat and reinstall windows from scratch.

 

[___]

There is a possibility, if ONLY your RMXP files are coming up as infected, that it's simply a false positive.  If you are not noticing any abnormal behavior on your computer, wait it out a day or two for another antivirus update to be released.  This happens every once in a while - AVG used to throw false positives on MMOs for instance.

 

[Chalupa]

There is a possibility, if ONLY your RMXP files are coming up as infected, that it's simply a false positive.  If you are not noticing any abnormal behavior on your computer, wait it out a day or two for another antivirus update to be released.  This happens every once in a while - AVG used to throw false positives on MMOs for instance.

It was only my RMXP Files.

 

[starseed28]

I am having that exact same problem. From what one of my IT friends told me is that some virus scanners recognize certain game exe files as a virus even though they are not. So you could have a virus or it just could be your virus scanner, its hard to say. Are you by chance running AVG? Thats what gave me my problem. Now my issue is that since I removed the "infected" files and what not my pc doesnt play rmxp at all anymore even though I uninstalled and reinstalled the program. If I play an existing game it says "failed to create process" and if I try to start a new one it says "cannot find folder" and wont even begin. So more power to you. I just restarted on my laptop on which I have yet to have a problem ---crosses fingers---

I wish enterbrain had a support group where they would answer technical questions for paying customers.

 

[Tohsaka]

It's possible that someone used an executable like the RMXP ones to create a trojan, and the anti-virus is looking for a certain bit they have in common. Once again, a false positive.

There's also the possibility that the executables have been turned into backdoors as well- Do they still run?

 

[___]

Games that make use of interpreted code are especially vulnerable to false positives, combine that with a pretty tight copy protection scheme and false positives are very likely to happen from time to time.  It probably just looks a lot like or behaves a lot like some ruby-based trojan.

 

[Chalupa]

It's possible that someone used an executable like the RMXP ones to create a trojan, and the anti-virus is looking for a certain bit they have in common. Once again, a false positive.

There's also the possibility that the executables have been turned into backdoors as well- Do they still run?

Executables?  Sorry for my noobness

 

[___]

As in .exe files :D

 

[Chalupa]

As in .exe files :D

Okay, sorry, and yes, ALL of the RMXP (only the RGSS files, RMVX files, and things like MMORPGS, and other .EXEs work, just RMXP is infected)

 

[Tohsaka]

Uninstall RMXP- Get an updated Anti-Virus, and redownload a new installer.

 

[Chalupa]

Uninstall RMXP- Get an updated Anti-Virus, and redownload a new installer.

Okay, I'll try.