Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Submit a log and you will receive ALL the information we have in our DB's on everything on your system INSTANTLY!

vsvbvvsq.exe


Click here to Run a Free Scan for vsvbvvsq.exe Related Errors

vsvbvvsq.exe
What is it?
Vsvbvvsq.exe is a file associated with the W32.Mydoom.U@mm mass mailing worm.

What does it do?
W32.Mydoom.U@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses that it finds on an infected computer. The subject and message body vary, and the attachment has a .bat, .cmd, .exe, .pif, .scr, or .zip extension. It is similar to W32.Mydoom.P@mm.

When W32.Mydoom.U@mm is executed, it does the following:
  1. Copies itself as %System% askmon.exe.

    Notes:
      • Taskmon.exe is a legitimate file in the Windows 95/98/Me operating systems, but is in the %Windir% folder, not the %System% folder. (By default, this is C:Windows or C:Winnt.) Do not delete the legitimate file in the %Windir% folder.
      • %System% is a variable that refers to the System folder. By default, this is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32 (Windows NT/2000), or C:WindowsSystem32 (Windows XP).
  2. Creates the file, %Temp%Message, and then opens it with Notepad.


    Note:
    %Temp% is a variable that refers to the Windows temporary folder. By default, this is C:WindowsTEMP (Windows 95/98/Me/XP) or C:WINNTTemp (Windows NT/2000).
  3. Creates a mutex, "SwebSipcSmtxS1," which allows only one instance of the worm to run in memory.
  4. Creates the registry key:

    HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
    ExplorerComDlg32Version
  5. Downloads a file from a predefined Web page as vsvbvvsq.exe, and then runs the file.
More info and Removal
@symantec

Fix vsvbvvsq.exe Errors: Free Scan

Recommended: Free PC Speed Test - what is slowing down your PC?


vsvbvvsq.exe is Spyware!

Startup DB Entries:
Nothing Found

Service DB Entries:
Nothing Found

Disclaimer

Every attempt has been made to ensure the information about vsvbvvsq.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments
Security Risks - Adware Spyware
sndconfg16.exe | salm.exe | isass.exe | se.dll | kazza.exe | backweb-7288971.exe | bridge.dll | wtoolsa.exe | tkbellexe.exe | dl.exe | newdot~1.dll | wupdt.exe | mwsoemon.exe | saie.exe | webrebates0.exe | bxxs5.dll | funny.exe | 180ax.exe | randreco.exe | mssearchnet.exe | service.exe | webrebates1.exe | saap.exe | sais.exe | wsup.exe | backweb-137903.exe | sed.exe | alcmtr.exe | wo.exe | ffisearch.exe | optimize.exe | iadhide4.dll | backweb-8876480.exe | cdaengine0400.dll | istsvc.exe | newdotnet6_38.dll | Fvprotect.exe | Winupdate.exe | java.exe | cmesys.exe |