sdclt.exe - Windows Vista Backup Manager
Sdclt.exe, which manages the Windows file backup scheme, is a new executable file that's included with Windows Vista. This file replaces the older ntbackup.exe. The new name may have been chosen in order to remove references to the outdated NT operating system. The meaning of the cryptic "SDCLT" acronym is not known at this time.This file is a legitimate Windows OS component if found in the C:\windows\system32 directory. If it's located in other directories, it may represent malware of some form. No reports have been noted describing malware that hijacks the sdclt.exe file name, but this situation could change at any time.
This file is currently restricted only to Windows Vista. It should not be found on earlier versions of the Windows OS, though it's conceivable Microsoft may replace the ntbackup.exe file on XP with this file in a subsequent service pack release.
The sdclt.exe file is not a critical component of the OS, but is required for Windows Backup to function. If the file is removed or altered, the built-in backup functionality will be disabled. Windows may also report deletion of the file as a suspicious event. To use it, simply execute the file (e.g. Run -> c:\windows\system32\sdclt.exe) and the backup manager screen will appear. Command line options, such as the /CHECKFULL flag (which denotes a full backup, rather than an incremental) are available. Terminating a running copy of the legitimate sdclt.exe will cause a backup process to fail.
Anyone who makes use of third-party backup software is unlikely to access the sdclt.exe file, since it's not used for anything else. Microsoft's forums mention several defects that apply to this file. These are expected to be resolved under Vista SP1.
As always, if you suspect a malware infestation you should download and run a current copy of an antivirus/malware scanner in order to isolate and remove the offending application. Be sure to obtain the most recent definition files, since these are critical to the removal of current malware variants.
windowshelp.net