Remove W32.Mydoom. Description and removal instructions

 
Title: W32.Mydoom

Type: Worms
Severity scale:W32.Mydoom severity is 60  (60 / 100)
 
W32.Mydoom is a mass-mailing worm, sending messages with the following subjects: Status, test, Test, TEST, hello, HELLO, Server Report, hi, HI, Error.

The email contains an attachment named: message.exe, body.zip, ogp.zip, document.zip, text.zip, message.zip, ymplf.zip, readme.zip, file.zip, body.zip, text.pif, document.pif, doc.pif, data.zip, doc.zip, raun.zip, etwblf.zip, etc.

When a computer is infected, the worm sets up a backdoor into the system by opening TCP ports 3127 through 3198, which can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources.


W32.Mydoom properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic W32.Mydoom removal:

remover for W32.Mydoom

W32.Mydoom manual removal:

Delete registry values:
Browse to the key:
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Delete the value 'TaskMon'
Browse to the key:
'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Delete the value 'TaskMon'
Delete files:
shimgapi.dll, askmon.exe

Other programs to remove W32.Mydoom:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 09/04/04

Additional resources related to W32.Mydoom:

Attention: If you know or you have a website or page about W32.Mydoom removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about W32.Mydoom parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: