What You Should Know About the Mydoom and Doomjuice Worms

Published: January 27, 2004 | Updated: July 30, 2004

The Mydoom worm leaves a program, known as a back door, that could potentially allow an attacker to gain access to infected computers. Several variants of the worm are currently circulating, and malicious programs related to Mydoom have been released under the names Doomjuice and Zindos. Microsoft urges you to take action to remove these worms and help keep your computer safe from malicious intrusions.

Actions to Take Now

1.

Check Your Computer for Infection and Remove the Worm

 

To find out whether your computer is infected, with Mydoom variants A, B, E, F, G, J, L, or O; Zindos.A; or Doomjuice.A or Doomjuice.B, try using the following free tool.

Scan and Clean Your Computer Automatically

If you are using Microsoft Windows XP, Windows 2000, or Windows Server 2003, try running the Mydoom, Zindos, and Doomjuice Worm Removal Tool from this Web page.

Note  For Windows Millennium Edition (Windows Me) and Windows 98 use the tool in the Download Center. This tool is not intended for Windows 95 or Windows NT 4.0. Please contact your antivirus vendor for assistance.

This tool scans your hard disk for Mydoom and Doomjuice and tries to remove the worm. To proceed, click Check My PC for Infection.

 

If you have trouble running the worm removal tool from this Web page, you can download the tool to your computer and run it manually.

Scan and Clean Your Computer Manually

The Mydoom, Zindos, and Doomjuice Worm Removal Tool is also available as a download from the Microsoft Download Center. This version works with Microsoft Windows XP, Windows 2000, Windows Millennium Edition (Windows Me), Windows 98, and Windows Server 2003.

Even if your computer is not infected, proceed to Step 2 to help Protect Your PC.

2.

Install and Enable a Firewall

 

If you do not already have a firewall installed on your computer, we recommend that you do so immediately. A firewall is a piece of software or hardware that creates a protective barrier between your computer and the Internet. The Protect Your PC site contains comprehensive guidance for installing and enabling a firewall.

3.

Visit Antivirus Software Vendors for More Information

 

If your computer is infected and you need technical assistance, contact your antivirus vendor or Microsoft Product Support Services for help removing the worm.

  • For support in the United States and Canada, call toll-free (866) PCSAFETY (727-2338).
  • For support outside the United States and Canada, visit the Product Support Services Web page.

For additional information and resources on Mydoom.O (also referred to as Mydoom.L and Mydoom.M), check the Web sites of the following antivirus software vendors participating in the Virus Information Alliance:

Help Someone Who is Having Trouble Accessing Web Sites

Mydoom.B blocks access to some Microsoft and antivirus vendors' Web sites. If someone you know cannot access this Web page, they may be infected with Mydoom.B. You can help them by sharing the information on this page, including the location of the worm removal tool and the Protect Your PC site.

Stay Secure: Get e-mail about security updates
**
**
**

Related Links

Technical Virus Alerts

**
**

Glossary Terms

Click the term to get the definition from our Security Glossary.

virus

worm

**