Microsoft Post Mydoom, Zindos, and Doomjuice Worm Removal Tool

This tool helps to remove the Mydoom.A, Mydoom.B, Mydoom.E, Mydoom.F, Mydoom.G, Mydoom.J, Mydoom.L, Mydoom.O, Zindos.A, Doomjuice.A, and Doomjuice.B worms from infected systems. Once the tool has run—after the End-User License Agreement (EULA) is accepted—it automatically checks for infection and removes any of the targeted worms that are found. If a machine is infected with the Mydoom.B worm, the tool also provides the user with the default version of the hosts file and set the "read-only" attribute for that file. This action enables the user to visit previously-blocked Microsoft and antivirus Web sites.

This tool will not:

• Detect or remove any viruses or worms other than Mydoom.A, Mydoom.B, Mydoom.E, Mydoom.F, Mydoom.G, Mydoom.J, Mydoom.L, Mydoom.O, Zindos.A, Doomjuice.A, and Doomjuice.B
• Detect or remove future variants of Mydoom, Zindos, or Doomjuice
• Prevent a machine from being re-infected with Mydoom if, for example, an infected e-mail attachment is re-executed
• Detect or remove malware that exists on a system as a result of the backdoor component created by a Mydoom variant, besides Zindos.A, Doomjuice.A and Doomjuice.B
• Delete any e-mail that contains a Mydoom variant
• Run on any version of Windows NT 4.0

The user must be an administrator to run this tool.

(Source: Microsoft Download)

Download Tool [120 KB]

More information In Microsoft Knowledge Base Article 836528 .