Win32.Mydoom.V@mm Free Removal tool 1.0 Description:

Symptoms: Presence of files Documents and SettingsAdministratorStart MenuProgramsStartuprx32hh00.exe and %SYSTEM%winspf32.exe.
Presence of a file tmp*.tmp with a size of 234496 bytes.

Presence of registry key: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunWinSPF = %SYSTEM%winspf32.exe.

HKCUSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsVersion = FrankenShteiN
HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsVersion = FrankenShteiN

HKCUSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User Agent
HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User Agent

This is a mass-mailer that also drops a backdoor. The file is downloaded from one the following urls:

"http://www.llc.unibo.it"
"http://www.surrenderzeeland.nl"
"http://www.mercyships.de"
"http://www.hiw.kuleuven.ac.be"
"http://www.ach.ch"
"http://vugs.geog.uu.nl"
"http://www.planetboredom.net"

and is downloaded to a temporary file ( with a temporary name ). This file's size is 234496 bytes.

It seems that there are more versions of this worm, which are just recompilations of the same source.

The worm creates a mutex called 'qwedefacedRDE'. It uses threads for searching for e-mail addreses in the following file types: wab,xls,vbs,uin,txt,tbb,stm,sht,php,msg,mht,jsp,htm,eml,dht,dbx,cgi,cfg,asp.

It sends mail using it's own SMTP engine.

Related searches:

tool - light tool - nokia configuration tool - snipping tool - uninstall tool - solar tool - geekz virus remover - network discovery tool - tool reporter - cctv design tool - snow removal - audit report tool - checksum tool - crash analysis tool - download tool

Win32.Mydoom.V@mm Free Removal tool security information

You cannot download any crack or serial number for Win32.Mydoom.V@mm Free Removal tool on this page. Every software that you are able to download on our site is legal. There is no crack, serial number, hack or activation key for Win32.Mydoom.V@mm Free Removal tool present here. Our collection also doesn't contain any keygens, because keygen programs are being used in illegal ways which we do not support. All software that you can find here is freely downloadable and legal.

Win32.Mydoom.V@mm Free Removal tool installation package is prepared to be downloaded from our fast download servers. It is checked for possible viruses and is proven to be 100% clean and safe. Various leading antiviruses have been used to test Win32.Mydoom.V@mm Free Removal tool, if it contains any viruses. No infections have been found and downloading Win32.Mydoom.V@mm Free Removal tool is completelly problem free because of that reason. Our experts on malware detection tested Win32.Mydoom.V@mm Free Removal tool with various spyware and malware detection programs, including fyxm.net custom malware and spyware detection, and absolutelly no malware or spyware was found in Win32.Mydoom.V@mm Free Removal tool.

All software that you can find on our servers, including Win32.Mydoom.V@mm Free Removal tool, is either freeware, shareware or open-source, some of the software packages are demo, trial or patch versions and if possible (public domain licence), we also host official full versions of software.

Because we want to be one of the fastest download sites on the web, we host all the software including Win32.Mydoom.V@mm Free Removal tool on our servers. You cannot find here any torrents or download links that would lead you to dangerous sites.

Fyxm.net does support free software, however we do not support warez or illegal downloads. Warez is harming producers of the software.

Enjoy!