What is it?
syshosts.exe is a file associated with the W32.MyDoom.Y@mm worm What does it do?
W32.MyDoom.Y@mm is a mass-mailing worm
when w32.mydoom.ymm is executed it does the following:
Copies itself as the following files:
%System% is a variable that refers to the System folder. By default
this is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32
(Windows NT/2000), or C:WindowsSystem32 (Windows XP).
More information and removal instructions @symantec
- Adds the value:
to the registry key:
so that the worm is executed every time Windows starts.
- Opens http://www.microsucks.com in Internet Explorer.