|
For remove W32.Downadup.B virus,please clean/delete all W32.Downadup.B infected files and Delete/Modify any values W32.Downadup.B added to the registry as following:
SUMMARYTECHNICAL DETAILSREMOVALThis virus is first detected: December 30, 2008Updated: December 30, 2008 11:55:56 PMType: WormSystems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000CVE References: CVE-2008-4250W32.Downadup.B is a worm that spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (BID 31874). It also attempts to spread to network shares protected by weak passwords and blocks access to security-related Web sites.This virus /worm/Torjan self protect for the followingInitial Rapid Release version December 30, 2008 revision 021Latest Rapid Release version December 30, 2008 revision 021Initial Daily Certified version December 30, 2008 revision 024Latest Daily Certified version December 30, 2008 revision 024Initial Weekly Certified release date December 31, 2008A Trojan horse that opens a back door on the compromised computer that modifies the home page and desktop settings on a compromised computer.,ADware can also slow your Internet connection by using bandwidth to retrieve advertisements. In addition, adware can increase the instability of your system because many adware applications are not programmed well.it can automatically plays, displays, or downloads advertisements to a computer after the adware software is installed.steals information such as bank accounts, usernames, passwords and credit card details from your computer and sends it to the attacker. here for a more detailed description of Rapid Release and Daily Certified virus definitions.This virus/maleware/sapm/worm threat report:SUMMARY detect level of this levelSUMMARY detect level of this level Level: LowNumber of Infections: 0 - 49Number of Sites: 0 - 2Geographical The virus spread level:: LowThreat Containment: EasyRemoval: EasyDestroy level of this virus：Destroy level of this virus： Level: MediumPayload: Spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (BID 31874).Modifies Files: Modifies the tcpip.sys file.The virus spread level:The virus spread level: Level: MediumShared Drives: Attempts to spread to network shares protected by weak passwords.Writeup By: Sean KiernanTechnical Details
For successful remove W32.Downadup.B virus,you may also need do as following:
1. Temporarily Disable System Restore .
2. Update the virus definitions. Reboot computer in SafeMode;
3. Delete the IE temp files,some W32.Downadup.B temp file exisit there.
4.If you failed to remove W32.Downadup.B,please go to our remove help forum:http://help.antiviruses123.com
|
