Wach...lagi pada kena Virus ini yach....sama nich....perusahaan gue juga lagi kena. 2 hari kemarin Kamis dan Jum'at pada nggak bisa kerja...system e-mail dan jaringan mati
Idup mati idup.... Patching dengan windows update dan bersihkan virus dengan fixdownadup.exe yg di peroleh dari trendmicro. Ini langkah2 yg kita tempuh di dalam jaringan system kami. Yang manual lebih ampuh..... Instruction Clean WORM_DOWNAD.A Couple of things you need to prepare: * Create a share that's accessible to ALL user accounts, including local accounts (local administrator) and copy the FIXDOWNADUP.EXE and Windows patch in it. The batch will run both the patch push & the clean-up and then force a reboot. A pop-up screen will be shown for the user without an option to cancel or delay, and include a countdown timer to reboot. I would suggest you use this if you have any systems with issues remaining in the environment, but test it first on a couple to get the batch file working correctly. If you follow the above steps and the instructions in the include PDF, you should be able to get this going easily. Please try these instructions for the manual process: If the automatic tool doesn't work, you'll have to revert to the manual process. Connect to the remote machines c:\windows directory and ensure that the $NtUninstallKB958644$ folder is present. (it is a hidden folder.) This shows the patch was installed. If it is not, install it now. \\namidm06c\tech$\WindowsXP-KB958644-x86-ENU.exe <file:///\\namidm06c\tech$\WindowsXP-KB958644-x86-ENU.exe> Go into the \system32 directory and sort by modified date and find DLL files with the same modified date as the kernel32.dll and a size of 60kb. Copy the files name and then search the systems registry for this file name. you will find two entries. Delete the parent keys For example: ([HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\lblgtv\Parameters] in this case you would delete the LBLGTV key.) and then reboot the system ________________________________ From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of alex mks Sent: Saturday, December 06, 2008 10:17 AM To: [email protected] Subject: Re: [ITCENTER] W32.Downadup Virus ini bisa terdeksi oleh trendmicro dengan update sebelum di scan namun harus menggunakan windows Original jika bukan OS original tdk terdeksi oleh antivirus. Kemudian pach windowsnya bisa di google dengan key "WORM_DOWNAD.A " 2008/11/28, Muhammad Doris <[EMAIL PROTECTED] <mailto:mcdowies%40gmail.com> >: > > Dear IT Friends yg baik hatinya dan luhur budi pekertinya. > > Ada yg tau cara menghapus virus W32.Downadup. > > Saya udah install Symantec, hasilnya: Detect, ada yg cleaned by deletion , > ada juga yg left alone.. > > Saya udah install Kaspersky, hasilnya: ga detect. > > Trus gimana donk teman-teman? > > =================== > > [Non-text portions of this message have been removed] > > > [Non-text portions of this message have been removed] [Non-text portions of this message have been removed] ------------------------------------ -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/ITCENTER/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/ITCENTER/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
