sbbd.exe, Win XP SP2 Options

[hat331]

Is this file, located in the system32 directory, malware or not? It is called "Sunbelt Boot Delete Utility", and its copyright is attributed to Sunbelt, but I do not have CounterSpy on my computer. Is it safe?

[Doug]

As you've probably discovered, there's not much available via Google search for either sbbd.exe or for Sunbelt Boot Delete Utility.

In some logs, the Expert has recommended to remove the item, in others it seems to be ignored.
No help there.

You can have the file itself analysed Here:
http://virusscan.jotti.org/

A safe move you can take is to "move" or "rename" the file without actually deleting it.

Reboot into SAFE Mode (restart machine, then repeatedly tap F8 until the Menu comes up, Select -SAFE Mode)

In Windows Explorer/My Computer, navigate to the file at C:\windows\system32\sbbd.exe
Right-Click on sbbd.exe and Select - Rename
Rename it to sbbd.old

Or you can cut/paste it to a holding folder that you create.
Create a New Folder on your C:\ root directory. Name it TC Experiment

In Windows Explorer/My Computer, navigate to the file at C:\windows\system32\sbbd.exe
Highlight sbbd.exe with your cursor - then Press ctrl-x to "cut" to remove it from your system32 Folder
Navigate to your new folder C:\TC Experiment - press ctrl-V (paste) to place it in the new folder.


Now Reboot Normally, and run your machine.
If it was an important item, required by some application or process, you Machine will complain that it can't be found, sooner or later. If this occurs, you can restore the file by reversing the "renaming" or by cut and paste to return it to system32 folder from your TC Experiment folder.

Best Regards

[hat331]

Yeah, I wonder why there is no information available on this file. I think I will scan it at virusscan.jotti.org first. I deleted it once using Killbox, only to find it again. Then I deleted it in Safe Mode; I haven't seen it since, on that computer. However, it exists on another computer of mine. It is quite a mystery to me. Thanks for your help, though.