التحذير من فايروس جديد ((مايدوم))

[حليو]

التحذير من فايروس جديد ((مايدوم))

ارجو ان يكون الشرح واضح يا شباب وطريقة ازالته من الجهاز

تحياتي

How to Tell If a Computer Is Infected with Mydoom.A or Mydoom.B


To find out whether your computer is infected, use one of the following procedures.

First, find out which operating system you use.



If you use Windows XP, Windows 2000, or Windows NT 4.0

To find out if a computer is infected, do the following:

1. Click Start, and then click Run.

2. In the Open box, type:
cmd

3. Click OK. The black Command Prompt window will open, displaying C:\...>.

4. Type cd \ and press ENTER. This will change the current directory to C:\ followed by a cursor.

5. To check for Mydoom.A, click the cursor, and then type:
dir shimgapi.dll /a /s

6. Press ENTER.

7. Wait a few moments:

o If File Not Found is displayed, the computer is not infected with Mydoom.A.

o If Total Files Listed is displayed (see Figure 1 for details), the computer is infected with Mydoom.A. Contact your anitvirus vendor.

8. To check for Mydoom.B, click the cursor, and then type:
dir ctfmon.dll /a /s

9. Press ENTER.

10. Wait a few moments:

o If File Not Found is displayed, the computer is not infected with Mydoom.B.

o If Total Files Listed is displayed (see Figure 2 for details), the computer is infected with Mydoom.B. Follow the steps below.



If you use Windows Millennium Edition, Windows 98, or Windows 95

To find out if a computer is infected, do the following:

1. Click Start, and then click Run.

2. In the Open box, type:
command

3. Click OK. The black Command Prompt window will open, displaying C:\...>.

4. Type cd \ and press ENTER. This will change the current directory to C:\ followed by a cursor.

5. To check for Mydoom.A, click the cursor, and then type:
dir shimgapi.dll /a /s

6. Press ENTER.

7. Wait a few moments:

o If File Not Found is displayed, the computer is not infected with Mydoom.A.

o If Total Files Listed is displayed (see Figure 3 for details), the computer is infected with Mydoom.A. Contact your antivirus vendor.

8. To check for Mydoom.B, click the cursor and then type:
dir ctfmon.dll /a /s

9. Press ENTER.

10. Wait a few moments:

o If File Not Found is displayed, the computer is not infected with Mydoom.B.

o If Total Files Listed is displayed (see Figure 4 for details), the computer is infected with Mydoom.B. Follow the steps below.


Top of page

What to Do If Your Computer Is Infected with Mydoom.B


If your computer is infected, first consult your preferred antivirus vendor to get the latest updates and information. If you are unable to access your antivirus vendor's website, you can regain access by using one of the following procedures.

For Windows XP, Windows 2000, and Windows NT 4.0

1. Click Start, and then click Run.

2. In the Open box, type:
cmd.

3. Click OK. The black Command Prompt window will open, displaying C:\...>.

4. Type cd \ and press ENTER. This will change the current directory to C:\ followed by a cursor.

5. Click the cursor and:

1. Type:
del /F %systemroot%\system3 2\drivers\etc\hosts

2. Press ENTER.

3. Type:
echo # Temporary HOSTS file >%systemroot%\system 32\drivers\etc\hosts

4. Press ENTER.

5. Type:
attrib +R %systemroot%\system3 2\drivers\etc\hosts

6. Press ENTER.

6. After typing these commands, do one of the following:

o If you use Windows NT 4.0, restart your computer.

o If you use Windows XP or Windows 2000, do not restart your computer. Instead, do the following:

· Type:
ipconfig /flushdns

· Press ENTER.

For Windows Millennium Edition, Windows 98, and Windows 95

1. Click Start, and then click Run.

2. In the Open box, type:
command.

3. Click OK. The black Command Prompt window will open, displaying C:\...>.

4. Type cd \ and press ENTER. This will change the current directory to C:\ followed by a cursor.

5. Click the cursor and:

1. Type:
del c:\windows\hosts

2. Press ENTER.



Top of page

Visit Antivirus Software Vendors for More Information


If your computer is infected with either Mydoom.A or Mydoom.B and you need technical assistance, contact your antivirus vendor or Microsoft Product Support Services for help removing the worm.

· For Microsoft Product Support Services in the United States and Canada, call toll free (866) PCSAFETY (727-2338).

· For Microsoft Product Support Services outside the United States and Canada, visit the Product Support Services Web page.

Find additional information and resources from antivirus software vendors participating in the Microsoft Virus Information Alliance:

· McAfee

· Trend Micro

· Symantec


· Computer Associates