Home Malware Programs Worms Worm.Doombot

Worm.Doombot

Posted: June 3, 2006

Threat Metric

Threat Level: 9/10
Infected PCs: 46
First Seen: July 24, 2009
OS(es) Affected: Windows

Worm.Doombot is a worm that replicates itself onto other computers through email attachments. Worm.Doombot may intentionally disable antivirus applications, and will allow an attacker remote access to your computer through an IRC backdoor. Some versions of Worm.Doombot may spread through instant messenger programs. Worm.Doombot will attempt to email itself as an attachment to email addresses that it finds on your computer. This variant is also known as Foundu-A and Mytob.NK.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



Confirmation_Sheet.exe wmserv.exe File name: Confirmation_Sheet.exe wmserv.exe
Size: 88.06 KB (88064 bytes)
MD5: b11ce9564f80e038678966b887c81cde
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
kernel_runtime.exe File name: kernel_runtime.exe
Size: 94.2 KB (94208 bytes)
MD5: 98884f5e4ce63ff7874258924a1a5633
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
Loading...