Jump to content

Build Theme!
  •  
  • Infected?

Welcome Guest to What the Tech - Register now for FREE

We specialize in the removal of malicious software (malware), but here you'll find free help and support for all your tech questions. We invite you to ask questions, share experiences, and learn. Explore our message boards, or register now to post messages of your own. Please Start Here. Register today (registration removes advertising)

Create an Account Login to Account


Photo

sbbd.exe


  • Please log in to reply
2 replies to this topic

#1 hat331

hat331

    New Member

  • New Member
  • Pip
  • 2 posts

Posted 16 September 2006 - 03:55 PM

Is this file, located in the system32 directory, malware or not? It is called "Sunbelt Boot Delete Utility", and its copyright is attributed to Sunbelt, but I do not have CounterSpy on my computer. Is it safe?

Advertisement

    Register to Remove


#2 Doug

Doug

    Retired Administrator -Tech Team

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,051 posts

Posted 16 September 2006 - 08:48 PM

As you've probably discovered, there's not much available via Google search for either sbbd.exe or for Sunbelt Boot Delete Utility.

In some logs, the Expert has recommended to remove the item, in others it seems to be ignored.
No help there.

You can have the file itself analysed Here:
http://virusscan.jotti.org/

A safe move you can take is to "move" or "rename" the file without actually deleting it.

Reboot into SAFE Mode (restart machine, then repeatedly tap F8 until the Menu comes up, Select -SAFE Mode)

In Windows Explorer/My Computer, navigate to the file at C:\windows\system32\sbbd.exe
Right-Click on sbbd.exe and Select - Rename
Rename it to sbbd.old

Or you can cut/paste it to a holding folder that you create.
Create a New Folder on your C:\ root directory. Name it TC Experiment

In Windows Explorer/My Computer, navigate to the file at C:\windows\system32\sbbd.exe
Highlight sbbd.exe with your cursor - then Press ctrl-x to "cut" to remove it from your system32 Folder
Navigate to your new folder C:\TC Experiment - press ctrl-V (paste) to place it in the new folder.


Now Reboot Normally, and run your machine.
If it was an important item, required by some application or process, you Machine will complain that it can't be found, sooner or later. If this occurs, you can restore the file by reversing the "renaming" or by cut and paste to return it to system32 folder from your TC Experiment folder.

Best Regards

#3 hat331

hat331

    New Member

  • New Member
  • Pip
  • 2 posts

Posted 17 September 2006 - 10:21 AM

Yeah, I wonder why there is no information available on this file. I think I will scan it at virusscan.jotti.org first. I deleted it once using Killbox, only to find it again. Then I deleted it in Safe Mode; I haven't seen it since, on that computer. However, it exists on another computer of mine. It is quite a mystery to me. Thanks for your help, though.

Advertisement

    Register to Remove



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users