Computing.Net > Forums > Security and Virus > E-mail Worm/ Mydoom

E-mail Worm/ Mydoom

Reply to Message Icon

Original Message
Name: Pez
Date: February 13, 2008 at 16:02:24 Pacific
Subject: E-mail Worm/ Mydoom
OS: Win XP Pro
CPU/Ram: Pentium IV-3Gig/ 3 Gig RA
Model/Manufacturer: Custom
Comment:

Hi all.

I use ZoneAlarm Pro for my Anti-virus/ Spyware/ and Firewall.

A pop-up from ZoneAlarm showed up on my screen saying it had detected this:

E-mail-Worm.Win32.Mydoom.bq

And with this ZoneAlrm pop-up, it gives you a drop-down menu of choices, such as Rename, Quarantine, Delete, Delete on Reboot, etc. Sometimes one of the choices won't work, depending on the severity of the virus/ spyware, and a reboot will be required.

Anyway, I chose "Delete", and it was able to do so. However, the next day, I'm getting that same pop-up from ZoneAlarm, so I take it that this virus is renaming and replicating itself.

I did some research on its name, and found out it puts some files in the Windows directory in the "C" drive, such as "trayicons.exe", and "windisk.dll"; I deleted these files.

But since it keeps popping back up, can anyone give me some information on how to permanently delete this virus?

Thanks for any help.
Pez


Report Offensive Message For Removal

Response Number 1
Name: XpUser4Real
Date: February 14, 2008 at 08:53:13 Pacific
Subject: E-mail Worm/ Mydoom
Reply: (edit)

is it in your restore files? If so, turn off system restore and then scan

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 2
Name: Pez
Date: February 14, 2008 at 18:16:52 Pacific
Subject: E-mail Worm/ Mydoom
Reply: (edit)

Hi; thanks for the reply.

I know about System Restore, and how you can turn it "On" or "Off". So.....I hope this doesn't make me sound too much like a noob, but is there an actual file/ folder called "Restore"? If so, where is it located so I can scan that file/ folder manually with my ZoneAlarm.

Thanks,
Pez


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: E-mail Worm/ Mydoom

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software