Symantec W32.Mydoom@mm Removal Tool v1.12.0

Symantec is offering this free removal tool for W32.Netsky@mm variant infections, which include...

• W32.Mydoom.A@mm
• W32.Mydoom.B@mm
• W32.Mydoom.F@mm
• W32.Mydoom.G@mm
• W32.Mydoom.H@mm
• W32.Mydoom.L@mm
• W32.Mydoom.M@mm
• W32.Mydoom.Q@mm
• W32.Mydoom.AM@mm
• W32.Mydoom.AX@mm
• W32.Mydoom.AZ@mm
• W32.Mydoom.BA@mm
• W32.Mydoom.BN@mm
• W32.Mydoom.BO@mm
• W32.Mydoom.BQ@mm
• W32.Mydoom.BT@mm
• W32.Mydoom.BU@mm
• Backdoor.Zincite.A
• W32.Zindos.A
• Backdoor.Nemog
• Backdoor.Nemog.D

This removal tool will scan for and kill any active processes infected with W32.Mydoom@mm variants. It will also delete any files associated with the infection, as well as any registry values it founds to have been added by it.

If you are on a network or have a full-time connection to the Internet, such as a DSL or cable modem, disconnect the computer from the network and Internet. Disable or password-protect file sharing, or set the shared files to Read Only, before reconnecting the computers to the network or to the Internet. Because this worm spreads by using shared folders on networked computers, to ensure that the worm does not reinfect the computer after it has been removed, Symantec suggests sharing with Read Only access or by using password protection.

You will need administrative rights to use this tool with Windows 2000 or Windows XP (or higher). If running Windows XP or higher, it is highly recommended to disable the System Restore service before running this tool.