• Breaking News

    Best blog to find latest news about technology, business, entertainment, politics, and many more

    Free File Hosting Service»

    Monday 16 March 2009

    9 Step to Remove W32.Downadup.B Virus

    W32.Downadup.B Virus was discovered by Symantec last December 30, 2008, and was announce to public January 9, 2009. Now it widely spreading all over the world and it floodings network connections.

    This virus monitors DNS requests to domains containing certain strings and blocks access to those domains so that it will appear that the network request timed out. We (my MIS Team) discovered W32.Downadup.B Virus from our quarantine logs and we found out that it was introduce to the network using a USB drive activated by autorun.inf.

    W32.Downadup.B creates an autorun.inf file on all mapped drives so that the threat automatically executes when the drive is accessed. The threat then monitors for drives that are connected to the compromised computer in order to create an autorun.inf file as soon as the drive becomes accessible.

    You won’t be able to detect it using the command prompt because it run by using the RPC Handling Remote Code Execution. How to remove the virus just follow the steps below:

    1. Download the removal tool from Symantec website and place it on your desktop.
    2. Download the Security patch from microsoft website. ( Choose the file support with your OS). for Windows XP (KB958644)
    3. Temporarily Disable System Restore (Windows Me/XP).
    4. ​​​Update the virus definitions (If your using Symantec).
    5. Reboot your computer in SafeMode.
    6. Run the FixDownadup.exe that you have just downloaded and let it scan until it found a viruses.
    7. Run the Security Patch.
    8. Reboot your system in normal mode and run the Full System Scan to make sure that no virus present on your computer.
    9. As preventive measure We disabled autorun in the registry and disable USB Port access to all workstation.

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel