F - M Y D O O M
---------------

The F-Mydoom utility disinfects computers infected with the 
following Mydoom worm variants:

 W32/Mydoom.A@mm
 W32/Mydoom.B@mm
 W32/Mydoom.K@mm
 W32/Mydoom.L@mm
 W32/Mydoom.M@mm
 W32/Mydoom.N@mm
 W32/Mydoom.P@mm
 W32/Mydoom.Q@mm
 W32/Mydoom.T@mm
 W32/Mydoom.U@mm
 W32/Mydoom.V@mm
 W32/Mydoom.W@mm
 W32/Mydoom.X@mm
 W32/Mydoom.AB@mm
 W32/Mydoom.AC@mm
 W32/Mydoom.AL@mm
 W32/Mydoom.AM@mm
 W32/Mydoom.AN@mm


Disinfection procedure should be as follows:

1. Unpack the F-Mydoom utility from the provided ZIP archive 
either with WinZip or PkUnzip utilities. A trial version of 
WinZip archiver can be downloaded from the following website:

http://www.winzip.com/ddchomea.htm
                                   
2. Close all running applications and run the unpacked 
F-Mydoom.exe file from a hard disk to eliminate the infection. 
You can run the utility by either doubleclicking on it from 
Windows Explorer or you can start it from a command interpreter 
(COMMAND.COM or CMD.EXE) by typing 'F-MYDOOM' without quotes at 
command prompt and pressing 'Enter' (for advanced users).

First the F-Mydoom utility will kill all Mydoom worm's processes 
and services in memory. Then the utility will remove Registry 
entries created by the worm. Finally the utility will scan all 
hard drives for infected files and delete them.

3. Restart a computer. After restart your system should be clean.


You can get a trial version of F-Secure Anti-Virus and the latest 
updates for it from our website:

http://www.europe.f-secure.com/download-purchase/list.shtml
http://www.europe.f-secure.com/download-purchase/updates.shtml


IMPORTANT NOTES
---------------

If a computer with Windows NT, 2000 or XP system is being 
disinfected, please log in as Administrator or as a user with 
local admin rights, otherwise the F-Mydoom utility might not 
disinfect the system correctly.

If you have Windows ME or XP, it is recommended to disable System 
Restore feature of these operating systems to prevent your 
computer from re-infection with Mydoom worm. The fact is that 
System Restore feature of these operating systems might save the 
infected file into the special folder and copy it back to a hard 
drive it every time it's been deleted by F-Mydoom utility. The 
instructions on how to disable System Restore feature are here:

Windows ME:
http://www.europe.f-secure.com/v-descs/sfc_dis.shtml

Windows XP:
http://www.europe.f-secure.com/v-descs/sfc_dis1.shtml

If you have any problems using this utility please contact us on 
'anti-virus-support@f-secure.com' address.

Copyright (C) 2005 F-Secure Corporation. All rights reserved.