Re: FN-FORUM: Mydoom virus- how to get rid of it?

date posted 1st February 2004 06:50

Chris said
> I don't think you'll be running the virus UNLESS
> you double-clicked the attachment that came ...
> The file AVG found infected was a .eml file, which
> ISTR is just a file containing the e-mail message,
> not a running copy of the virus.
>
> http://www.us-cert.gov/cas/techalerts/TA04-028A.html
> contains information about what you'll see on an infected system.

If you read to the bottom of that page you sent, it says just what I said:
"Recovery.
Identify and terminate the virus process (explorer.exe) using the Windows Task Manager, taskkill.exe (Windows XP), tlist.exe and
kill.exe (Windows NT/2000 Resource Kit), or a third party utility. (etc)"

Not being able to delete a virus 'cos it is active is hardly rare.

Hugh