:: supportLINK ::

W32.Mytob.V@mm Apr 4, 2005
Aliases:	None
Type:	Worm
Description:	W32.Mytob.V@mm is a mass-mailing worm that uses it own SMTP engine to send an email to addresses that it gathers from files on the compromised computer. The email has a variable subject and attachment name. The attachment will have a .bat, .cmd, .doc, .exe, .htm, .pif, .scr, .tmp, .txt, or .zip file extension. The worm also has the ability to open a back door and spreads through the network by exploiting common system vulnerabilities.
Solution:	Disable System Restore (Windows Me/XP). Update the virus definitions. Do one of the following: Windows 95/98/Me: Restart the computer in Safe mode. Windows NT/2000/XP: End the malicious process. Run a full system scan and delete all the files detected as W32.Mytob.V@mm. Reverse the changes made to the registry.