Mydoom Virus Alert

[~*McoreD*~]

18 hours old news but anyway...

How to Tell If a Computer Is Infected with Mydoom.B
For Windows XP

To find out if a computer is infected, do the following:

• Click Start, and then click Search.
• In the What do you want to search for? box, click All files and folders.
• In the All or part of the file name box, type ctfmon.dll. If that file exists on the computer, the computer is infected with Mydoom.B.
• Otherwise, the computer is not infected with that variant of the virus.

For Windows 2000 and Windows NT4

• Click Start, and then click Run.
• In the Open box, type cmd
• Click OK. The black Command Prompt window will open, displaying C:\...> followed by a cursor.
• Click the cursor, type dir ctfmon.dll /a /s and then press ENTER.
• Wait a few moments:

If the results show File Not Found, the computer is not infected with Mydoom.B.
If the results show File Found and the file size is displayed, the computer is infected with Mydoom.B, and you need to follow the steps below.

Code:

http://www.microsoft.com/security/antivirus/mydoom.asp

[jakesnake]

MyDoom is the worst virus ever !!!

read more here:

Code:

http://www.theregister.co.uk/content/56/35174.html

Seems to be "bigger" then SoBig-F

jake

[Dudelive]

The quote is from the removal tool text from the f-secure removal tool. in case you are infected this will remove it, also if you are not it will also let you know.

Quote:

F-Mydoom is a special tool to detect and remove the W32/Mydoom.A@mm
worm from the infected computer.

For detailed information on the Mydoom worm please visit
http://www.f-secure.com/v-descs/novarg.shtml

Thanks "~*McoreD*~" for posting this and reminding all to check their stuff.

The attached file is a free download from the website but if you are infected you may not be able to connect to certain websites to get the file.

Thanks
Dudelive

[darklord]

many thnx for the info and the removal tool m8s

[jakesnake]

Here's a few more


Sophos Anti-Virus - Removal Tool (W32/MyDoom-A)

Code:

http://www.sophos.com/support/cleaners/mydoogui.com

BitDefender Anti-Virus - Removal tool

Code:

http://www.bitdefender-av.de/Removals/Win32.Novarg.A@mm/Antinovarg-de.exe

Bullguard Anti-Virus - Removal tool

Code:

http://download.bullguard.com/antinovarg.exe

C.I.T (Symantec) Anti-Virus - Removal tool

Code:

http://antivirus.nih.gov/files/MS_PATCH/Retina_Mydoom/Retina_Mydoom.zip

F-Secure Anti-Virus - Removal tool

Code:

ftp://ftp.f-secure.com/anti-virus/tools/f-mydoom.exe

or

Code:

http://www.f-secure.com/tools/f-mydoom.exe

Network Associates Anti-Virus - Removal tool

Code:

http://download.nai.com/products/mcafee-avert/stinger.exe

Removes following viruses:

Code:

BackDoor-AQJ 
Bat/Mumu.worm 
Exploit-DcomRpc 
IPCScan 
IRC/Flood.ap 
IRC/Flood.bi 
IRC/Flood.cd 
NTServiceLoader 
PWS-Narod 
PWS-Sincom 
W32/Bugbear@MM 
W32/Deborm.worm.gen 
W32/Dumaru@MM 
W32/Elkern.cav 
W32/Fizzer.gen@MM 
W32/FunLove 
W32/Klez 
W32/Lirva 
W32/Lovgate 
W32/Lovsan.worm 
W32/Mimail@MM 
W32/MoFei.worm 
W32/Mumu.b.worm 
W32/MyDoom@MM 
W32/Nachi.worm 
W32/Nimda 
W32/Pate 
W32/Sdbot.worm.gen 
W32/Sober@MM 
W32/SirCam@MM 
W32/Sobig 
W32/SQLSlammer.worm 
W32/Swen@MM 
W32/Yaha@MM

Here's Trend Micros FREE online virus scanner:

Code:

http://housecall.trendmicro.com/

atb
jake

[darklord]

many thnx for the info and the removal tool m8s

[darklord]

thnx for the info and the removal tool m8s