Endpoint Protection

Hi...

In my organization most of the clients are infected by W32.Downadup.B virus.

SEP is used in my organization.

Please give tool for removing W32.Downadup.B virus from infected client machiens.

Thanx in advance.

hi

plase try below the link from symantec itself this will solve your problem

http://www.symantec.com/security_response/writeup.jsp?docid=2008-123015-3826-99

Hi,

You can download the tool from this link and run it.

http://www.symantec.com/security_response/writeup.jsp?docid=2009-011316-0247-99

You can also go through this Article.

https://www-secure.symantec.com/connect/articles/stop-conficker-spreading-using-group-policy


Above all these i will suggest you kindly these two windows patches.

KB 958644 and KB 958687.  Which is must

Good Luck.

Warm regards,
Sumit Bose

Hi...

In my organization most of the clients are infected by rundll32.exe and W32.Downadup.B virus.
we are using symantec end point securti 11.4

Please give tool for removing W32.Downadup.B virus from infected client machiens.

Here is another doc that may be helpful.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009033012483648

Did the tool that Sumit Bose sent you to (http://www.symantec.com/security_response/writeup.jsp?docid=2009-011316-0247-99) not work for you?

Download the file and run it on infected machine
http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/D.exe


for details go to
http://www.symantec.com/security_response/writeup.jsp?docid=2009-011316-0247-99

after that patch the windows from
http://www.microsoft.com/downloads/details.aspx?familyid=0D5F9B6E-9265-44B9-A376-2067B73D6A03&displaylang=en

 You may want to make sure you have Network Threat Protection installed and IPS enabled to stop these kinds of threats!  

Also ensure that TruScan is enabled and not just set to "Log,".