An expert who has achieved level 2 by getting 100 points
An expert who has answered 20 questions.
An expert that has over 10 points.
An expert whose answer got voted for 2 times.
Re: how to remove win32 downadup virus
Go to www.safer-networking.org and download spybot search and destroy,then goto www.malwarebytes.org and download malwarebytes antimalware,just click on the free green download button,after they are downloaded install them on your computer and run a full scan on the malwarebytes first,you have to go to settings to set for full scan,then run spybot,no special settings,when it isdone scanning just click on fix problems and that will take care of your virus.
Quick way to kill if you are infected. 1. dir *.* /ahs in \System32 folder 2. If you see a .DLL file (not always .dll) then you are probably infected. 3. Using process explorer, search for the name you see, then close the handle of the file. If you do not find it in process explorer then it is not active yet but proceed to 4 anyway. 4. Take ownership of the file 5. Delete file 6. Check \WINDOWS\TASK for any job file that does not belong there 7. Look for Autorun.inf file in root. If there, take ownership and delete 8. Reboot good lack;))))
- If you need clarification, ask it in the comment box above.
- Better answers use proper spelling and grammar.
- Provide details, support with references or personal experience.
Tell us some more! Your answer needs to include more details to help people.You can't post answers that contain an email address.Please enter a valid email address.The email address entered is already associated to an account.Login to postPlease use English characters only.
Tip: The max point reward for answering a question is 15.
Hi there, Well this Win32/mebroot is a trojan and you need a trojan killer to remove this. you can remove this by two ways - 1. Online - means when your computer runs the operating system and you can install the trojan killer and search for the trojan. 2. Offline - in this you don't need to start the operating system of your computer, you just need the offline CD of a trojan killer that starts automitally before windows start and then you just make a search for the trojan. Please follow the below link to get your trojan killer - http://trojan-killer.net/
Per their website, there is the following info on your worm:
The first version of this virus which is recognized by AVG as Downadup (alternativelly I-Worm.Generic) has been detected at the end of November / begining of December, 2008. Currently there are over 300 unique versions of this virus. AVG detects and protects against all known variants of the worm. Hope it takes care of it. If not let me know and I'll help you with fixing it so AVG does its job.
Navigate to "HKEY_Local_Machine>System>CurrentControlSetup>Services>Browser>Parameters" by following each level in the navigation tree on the left of the window.
Right click on the key "IsDomainMaster" in the right side of the window, click "Modify" and set the data entry to "False."
Restart your computer.
Navigate to Microsoft Support article 894391 (see Resources).
Select the download appropriate for your computer's operating system. You will now be directed to the specific download site based on your previous selection.
Click "Download" and then "Save File." Double click on the downloaded file to open the installation wizard.
Follow the steps of the installation wizard to install the patch
The patch referenced here was sent to all computers running Windows Automatic Updates; if you regularly install these updates, your system should not have an issue with Generic Host Win32 errors.
HOPE YOU DO IT...
PLEASE RATE ME
Right Click on My Computer, Click on Properties, Click on Advanced, under System Start-Up and Recovery Option, Click on Settings then Under The default Operating System you should see, The Time taken to dislplay list of OS and recovery Options When needed, just change the two numbers from 30 to '0', then click on OK, and restart your system. This will stop you from seeing Multiple OS When you boot up your system...and will go directly to your default. Hope It Helps!
download "SpyBot Search and Destroy" from Safer-networking,org http://www.safer-networking.org/en/mirrors/index.html
Download "MalwareBytes" from malwarebytes.org http://www.malwarebytes.org/mbam.php
install both and run Malwarebytes first using the "perform Full Scan" option. will take a while depending on your system. when it's done remove all selected problems it shows.
Run Spybot next. the first time you open it it will ask you to do some setup steps. go ahead and do it it will only help you stay clean. then click on "Check for Problems". when it's done click on "Fix Problems" and you are done. if these find any problems that cant be fixed let me know and I'll help you with those.