Make sure machines on your network are patched with MS08-67, and that SEP is installed on each endpoint with up-to-date definitions.

There are various ways to determine the source of the infection once it has started to spread. you can use SEP logs, nmap, nessus or GFI. once you find them, make sure the mentioned points applies on them too :)

Make sure machines on your network are patched with MS08-67, and that SEP is installed on each endpoint with up-to-date definitions.

There are various ways to determine the source of the infection once it has started to spread. you can use SEP logs, nmap, nessus or GFI. once you find them, make sure the mentioned points applies on them too :)

you might be intersted to look into the virus cleanup write up on symantec .

Also it is good KB http://service1.symantec.com/support/ent-security.nsf/docid/2009033012483648

Thanks guys it really help....

thanks,
Marvin

Patching windows  will protect you from daownadup.

Hi everyone,

I've been solving virus infection problems since a long time, and W32.Downadup has a complete chapter. I've added a new article called (How to beat W32.Dowandup infections - Outbreak Scenario)

https://www-secure.symantec.com/connect/articles/how-beat-w32downadup-infections-outbreak-scenario

If you have any comments/issues you are welcome to speak