[Dshield] Mydoom (A, B) and Doomjuice.A Worm Removal Tool (KB836528), 2/13/2004

jayjwa jayjwa at atr2.ath.cx
Sun Feb 15 12:38:53 GMT 2004


On Sat, 14 Feb 2004, Joseph Stahley 3rd wrote:

> Gee a day late and a lot of dollars short..How long has Mydoom been out? And
> MS just released a tool to fix it yesterday..Kinda makes you wonder what
> they are really doing at MS..

Maybe the Nachi.B worm will come along and kill the MyDoom's and they
won't have to patch. As for a removal "tool", I think del
C:\Windows\System\taskmon.exe shimgapi.dll ctfmon.dll explorer.exe
intrenat.exe; echo "127.0.0.1 localhost" > C:\Windows\System\hosts end
process on the above, restore the reg. from backup, and
recover sync-src-1.00.tbz, 'Body' & 'Message' out of System and Temp
should do it =)

(...I still think there's a secret coded message in 'Body' and 'Message'.)

-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s+: a- C+++ UL++++ P+ L+++ E- W+++ N++ o- K- w---
O-- M-- V-- PS+++ PE Y PGP+ t- 5- X- R* tv-- b++ DI-- D-
G e h+ r% y--
------END GEEK CODE BLOCK------




More information about the list mailing list