Mdm.exe[solved]

miekiemoes · July 2007

Hi,

Gathered mdm.exe from a terribly infected machine. It looks/appears like an SDBot variant - undetected by Bitdefender.

This file was present in the %WinDir%\AppPatch folder. PeLocked (unpack this nu die. got it?) - Typical for these variants <img class= " />

Runs as the service "Machine_Dbg-Mgr", displayname "Machine Debug Manager" (sneaky).

Edit - Duh! Forgot to attach.

Cd-MaN · July 2007

Signed as Backdoor.SdBot.AAD, will be detected after the next update. Thank you for the signature.

Best regards.

Comments