Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


HijackThis automated log analyzer! Submit a log and you will receive ALL the information we have in our DB's on everything on your system INSTANTLY!


Click here to Run a Free Scan for vsvbvvsq.exe Related Errors

What is it?
Vsvbvvsq.exe is a file associated with the W32.Mydoom.U@mm mass mailing worm.

What does it do?
W32.Mydoom.U@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses that it finds on an infected computer. The subject and message body vary, and the attachment has a .bat, .cmd, .exe, .pif, .scr, or .zip extension. It is similar to W32.Mydoom.P@mm.

When W32.Mydoom.U@mm is executed, it does the following:
  1. Copies itself as %System% askmon.exe.

      • Taskmon.exe is a legitimate file in the Windows 95/98/Me operating systems, but is in the %Windir% folder, not the %System% folder. (By default, this is C:Windows or C:Winnt.) Do not delete the legitimate file in the %Windir% folder.
      • %System% is a variable that refers to the System folder. By default, this is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32 (Windows NT/2000), or C:WindowsSystem32 (Windows XP).
  2. Creates the file, %Temp%Message, and then opens it with Notepad.

    %Temp% is a variable that refers to the Windows temporary folder. By default, this is C:WindowsTEMP (Windows 95/98/Me/XP) or C:WINNTTemp (Windows NT/2000).
  3. Creates a mutex, "SwebSipcSmtxS1," which allows only one instance of the worm to run in memory.
  4. Creates the registry key:

  5. Downloads a file from a predefined Web page as vsvbvvsq.exe, and then runs the file.
More info and Removal

Fix vsvbvvsq.exe Errors: Free Scan

Recommended: Free PC Speed Test - what is slowing down your PC?

vsvbvvsq.exe is Spyware!

Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
Startup DB Entries: