Fakeware Alert – SBSM.EXE

Sbsm.exe, sbmdl.exe, sbmntr.exe, and scit.exe will be found in your c:\Program Files\NetProject folder. NetProject is a ZLob Trojan variant that seems to install with other malware or fakeware programs including VirusHeat and MalwareCore. These programs display fake security alerts and offer to fix so-called problems. If you agree, the program will be installed on your system. You're then nagged to purchase the 'full version' of the program to perform the necessary fixes. You'll find more information at http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99.

We'd recommend removing these files using WinPatrol. First, kill them under Active Tasks then remove them from your Startup Programs, IE Helpers, and Hidden Files (if present). If running WinPatrol 8.x or later; right click each file then select "Delete file on Reboot". Finally, reboot your system.

You'll find more information and a removal tool for the Zlob Trojan at http://www.bleepingcomputer.com/forums/topic17258.html. If you happen to have a file called VirusHeat 3.9.exe, you'll find VirusHeat removal instructions at http://www.bleepingcomputer.com/forums/topic130080.html.

Fakeware

Remove