W32.Dotor - Doctor.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Dotor

Sender:

Varies.

Subject:

NewTool for Word Macro Virus

Message:

This tool allows you to protect you against unknown macro virus. Click
on the attached file to run this freeware.Best Regards. Have a nice
day

Attachment:

Doctor.exe

Comments: A mass-mailing worm that sends itself to all addresses in the Microsoft Outlook Address Book

Symptoms:


 Word documents that are infected by the infected template are
detected as W97M.Dotor.A@mm. 
 Copies itself to %Windows%Doctor.exe. 
 It adds the value DocTor     %Windows%Doctor.exe /newrun to the
registry key
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun so that
the worm runs when you start Windows.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions and run a full system scan.
Delete all files that are detected as W32.Dotor.A@mm and repair files that are detected as W97M.Dotor.A@mm.
Delete the value DocTor from the registry key