[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

MyDoom



Remocao manual do mydoom:

1. Delete estes valores do registro e reinicia o sistema
 
 [HKLM\Software\Microsoft\Windows\CurrentVersion\Run\TaskMon]


 [HKLM\Software\Microsoft\Windows\CurrentVersion\Run\TaskMon]


 [HKCR\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32]

2. Delete o worm do diretorio c:\windows\system
    
    taskmon.exe

e o componente de backdoor
 
     shimgapi.dll

Obs: O computador pode ser infectado via email ou kazaa apenas versoes
windows de 95 ao XP



Reply to: