BitDefender Downadup Conflicker.C Removal Tool

Virus Downadup since the beginning of February 2009 is being spread quickly, BitDefender provides tools virus.
Worm Downadup Win32/Conficker.C target large scale attack on 1 April. Worm Downadup Win32/Conficker.C as variants to 3, has the ability memblock some website security system, turning off the security system of Windows components and download the file at random to lead the web to a particular site.

When the Worm Downadup Win32/Conficker.C downloaded and activated by accident on the computer. The worm will copy itself to create a random file name in the Windows System. Worm sometimes release some of the file that is input into the program directory.
Worm Downadup Win32/Conficker.C will be active each time the computer is turned on, because it can be registered from the list of programs that should be active when the computer starts is enabled.
Computer Worm infected Downadup Win32/Conficker.C, directly taking some steps such as turning off the antivirus update system.
Worm will turn off service from Windows:
* wscsvc - Security Center
* WinDefend Windows Defender (Vista)
* wuauserv - Automatic Updates
* BITS - Background Intelligent Transfer Service
* ERSvc - Error Reporting Service
* WerSvc - Windows Error Reporting Service (Vista)
Worm also turn off system restore point, if your computer does not have a system restore then there is the possibility computer has been infected Downadup.

Remove Downadup from infected computers

Downadup (or Conficker) is a network worm that takes advantage of vulnerabilities in Windows to spread. Its removal is complicated by the fact that it blocks many known antivirus software and associated websites.

BitDefender Labs has detected a new and more aggressive Downadup version. It spreads using a Windows RPC Server Service vulnerability and is called Win32.Worm.Downadup.Gen.

The new version is more resilient to disinfection. Once the system is compromised, the worm disables Windows Update and blocks access to most of the anti-virus websites in order to hinder the user to disinfect his machine.

BitDefender is the first to offer a free tool which disinfects all versions of Downadup. This domain is the first to serve a removal tool without being blocked by the e-threat.

The worm itself is not new, it made its first appearance late November 2008, known under the names Conficker or Kido as well exploiting the vulnerability described in the Microsoft security bulletin MS08-067. After successful exploitation it used to install rogue security software on the infected machine.

Download and run the tools provided below to rid your computer or newtork of this e-threat.
1. Single PC Removal Tool
Removes Downadup from a single PC
Download Now (.zip - 2.2MB)
 

2. Network Removal Tool
Removes Downadup from PCs in a Microsoft Network
Download Now (.exe - 13MB)

Download Manual to Removal tool Downup for Single and Network (.doc - 324.50 KB)


3. PCMAV Express (Indonesia antivirus by pcmav)
Download (Ziddu)

The instruction for using pcmav express :

1. Confirm user you had the right to be equal the Administrator.
2. Deactivated antivirus that terinstall in order to not disturb PCMAV Express.
3. Confirmed beforehand that your computer not terkoneksi to the network or the internet for the process scan.
4. After being finished, really was suggested to do restart and scan repeated (if necessary). After the virus succeeded in being settled, immediately update/patch your Windows. PCMAV Express this then could detect if your computer not yet in patch.
5. Ascertain all of PC that has terhubung in the network also was free Conficker.Confirmed password Administrator's right in PC Anda was not easy to be guessed, because Conficker had the capacity to infiltrate with did “the conjecture” against password the Administrator with the public's available vocabulary in his dictionary. If the step 3-7 above was not followed by you well, then big the Conficker possibility could attack came back, was as good as anything antivirus that was used by you.