Win32.MyDoom.M@mm Free Removal tool 1.0
Symptoms:
- Presence of the following registry key:
- HKLMSoftwareMicrosoftWindowsCurrentVersionRunJavaVM
with the following value:
- %WINDIR%java.
|
0.00 
Freeware
0K
Windows Vista 
Symptoms:
- Presence of the following registry key:
- HKLMSoftwareMicrosoftWindowsCurrentVersionRunJavaVM
with the following value:
- %WINDIR%java.exe
Presence of the following files:
- %WINDIR%java.exe
- %WINDIR%services.exe
The port 1034 is listening for incoming connections.
Technical description: This is an internet worm that spreads trough e-mail. When it is run it adds the following registry key:
HKLMSoftwareMicrosoftWindowsCurrentVersionRunJavaVM
with the following value: %WINDIR%java.exe
It copies itself to %WINDIR%java.exe
where %WINDIR% is a variable representing the Windows directory.
It drops the following file: %WINDIR%services.exe, that is detected by BitDefender as Backdoor.Mydoom.M
It tries to terminate some programs that have windows with the following names: rctrl_renwnd32, ATH_Note, IEFrame.
tags
the following windirjava exe with the windirservices exe value windirjava following value hklmsoftwaremicrosoftwindowscurrentversionrunjavavm with following registry registry key key hklmsoftwaremicrosoftwindowscurrentversionrunjavavm
Download Win32.MyDoom.M@mm Free Removal tool 1.0
Download Win32.MyDoom.M@mm Free Removal tool 1.0
Similar software
Win32.MyDoom.M@mm Free Removal tool 1.0
SOFTWIN
Symptoms:
- Presence of the following registry key:
- HKLMSoftwareMicrosoftWindowsCurrentVersionRunJavaVM
with the following value:
- %WINDIR%java.
Win32.Bagle.AL@mm free removal tool 1.0
Bitdefender
Symptoms:
- Presence of file %SYSTEM%WINdirect.
Win32.MyDoom.S@mm Free Removal tool 1.0
Bitdefender
Symptoms:
Presence of "winpsd.
Win32.Evaman.A@mm Removal Tool 1.0
BitDefender
Symptoms:
Presence of registry key:
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerWintasks,
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerWintasks,
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunwintasks.
Win32.Mabutu.A@mm Free Removal Tool 1.0
SOFTWIN
Symptoms:
Presence of files *twain.
Win32.Mydoom.V@mm Free Removal tool 1.0
Softwin
Symptoms: Presence of files Documents and SettingsAdministratorStart MenuProgramsStartuprx32hh00.
Win32.Bagle.AJ@mm Free Removal tool 1.0
Bitdefender
Free removal tool for Win32.
MiMail worm free removal tool
SoftWin
A NEW variant of the MiMail worm family, version C, is proliferating across the world, according to security firm iDefense.
Cadoa Arts/Science Presence 1.0
Cadoa Arts/Science
PRESENCE is a useful mypace manager that makes promotion fast and easy.
My Peak Flow 2.1
My-Peak-Flow.com
My Peak Flow tracks and charts readings from peak flow meters and asthma symptoms.
RSS