VIRUS-DISCUSSION-L Archives

Archiver > VIRUS-DISCUSSION > 2004-09 > 1095679299


From: Mary R Bull <>
Subject: My Doom tool offered by Windows Update
Date: Mon, 20 Sep 2004 06:21:39 -0500


Hello everyone!

A friend on another list wrote to ask whether anyone had received a
message through Windows XP automatic updater pop-up that a My Doom
removal tool was available to download and install.

The message--in the pop-up, from the system tray, not in an e-mail or
in a Critical Update scan at the Microsoft website--said that it was
being offered only to those on whose machines the virus-worm My Doom
had been detected.

An AV scan--he didn't say what AV he uses--showed no problem.

I run XP, with the Updater enabled and configured to "Ask before
download and Ask before install," and I have not received such an
update notification. No one else has replied to my friend's message
except someone who asked:

"What does "netstat -a" on the command line tell you?"

To which the answer was a copy of that response, showing only usual
"LISTENING" plus connections to the ISP.

So if "My Doom" is present on his machine it isn't doing anything yet.

Looking for traces of it in the registry isn't an option, so far as I
can tell from reading its description at Trend, because it overwrites
normal Windows files.

Bottom line question here: Has anyone on the Virus-Discussion List
received a Update notification from Microsoft Windows Updater that
offers this My Doom removal tool?

--
Best regards,
Mary

Using The Bat! 3.0.0.15 on Windows XP 5.1 2600 Service Pack 2



This thread: