Threat Search: 

ThreatExpert's Statistics for W32/SdBot-DKI [Sophos]:

W32/SdBot-DKI [Sophos] is also known as:
Threat AliasNumber of Incidents
Worm.Win32.Neeris [Ikarus]11
Worm:Win32/Neeris.AN [Microsoft]10
Backdoor.Sdbot [Symantec]7
Win32/Autorun.worm.32256.D [AhnLab]7
W32.Spybot.Worm [Symantec]5
Backdoor.Win32.IRCBot.jwy [Kaspersky Lab]2
Backdoor.IRCBot.GEN [PC Tools]1
Backdoor.Win32.IRCBot.gxj [Kaspersky Lab]1
W32/Autorun.worm.h [McAfee]1
W32/Sdbot.worm [McAfee]1
Win32/IRCBot.worm.variant [AhnLab]1
Worm.AutoRun.tet [PC Tools]1
Worm.Win32.AutoRun [Ikarus]1
Worm.Win32.AutoRun.adkh [Kaspersky Lab]1
Worm.Win32.AutoRun.suc [Kaspersky Lab]1
Worm.Win32.AutoRun.tet [Kaspersky Lab]1
Worm.Win32.AutoRun.unu [Kaspersky Lab]1
Worm.Win32.AutoRun.use [Kaspersky Lab]1
Worm.Win32.AutoRun.xjw [Kaspersky Lab]1
WORM_SPYBOT.OQ [Trend Micro]1

W32/SdBot-DKI [Sophos] is known to be created as:
%System%\csrsc.exe
%Windir%\system\svchost.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.