SDMTB is a Cool Web Search variant first discovered on April 12 of 2005.  It will typically appear as part of a bundle of Cool Web Search spyware.  Cool Web Search variants are often transmitted by the user clicking on a pop-up advertisement, usually displaying adult content.  As such, your computer may have already been infected before you got SDMTB.

SDMTB is a browser add-on that collects your demographic data.  Typically, that is your browsing history, browser type and your computer’s profile, but it is capable of getting more data.  It uses this information to generate pop-up ads.  As a Browser Hijacker, it can also redirect your browsing to a Cool Web Search affiliate page.

As part of a Cool Web Search infection, it can also do a lot more damage to your computer than merely slowing down your computer and occasionally crashing your browser.  It can disable your active desktop and cause Windows to reboot.

If your computer is infected with SDMTB, you should remove it as soon as possible.  Especially since it uses randomly generated file names, you should use an antispyware tool such as SpyZooka to remove it.  Manual removal techniques may miss some files, which would restart the infection.  Remove SDMTB completely with SpyZooka.

Also Known As:
CWS.SDMTB,
CoolWebSearch.SDMTB,
SDMTB.DLL, Inga,
Web Directory Module BHO

Associated Files:
sdmtb.dll, {441354C5-911B-409B-9A66-A11D6D4E1A22} (search all registry folders for this CLSID),
randomly generated file names.