TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_DOWNAD.AD
Solution

Minimum scan engine version needed: 8.911-1001

Pattern file needed: 6.625.00

Pattern release date: Nov 13, 2009


Important note: The "Minimum scan engine" refers to the earliest Trend Micro scan engine version guaranteed to detect this threat. However, Trend Micro strongly recommends that you update to the latest version in order to get comprehensive protection. Download the latest scan engine here.


Solution:

Note: To fully remove all associated malware, perform the clean solution for TROJ_DOWNADJOB.A.

AUTOMATIC REMOVAL INSTRUCTIONS


Users of Trend Micro PC-cillin Internet Security and Network VirusWall can detect this exploit at the network layer with Network Virus Pattern (NVP) 10273, or later.

Download the latest NVW pattern file from the following site:


MANUAL REMOVAL INSTRUCTIONS

Note: To fully remove all associated malware, perform the clean solutions for the following:

Running Trend Micro Fixtool

Users may also opt to remove the malware from the system using this special Trend Micro fixtool. Download, extract, and run the said fixtool in the same folder where your latest Trend Micro pattern file is located. Users without Trend Micro products may also use this fixtool by following the detailed instructions inside the readme.txt file.

Applying Patch

This malware exploits known vulnerability. Download and install the fix patch supplied by Microsoft. Refrain from using this product until the appropriate patch has been installed. Trend Micro advises users to download critical patches upon release by vendors.

Note: The following Microsoft Web pages are useful to prevent from malware that uses brute force attacks to force its way to the network:




Trend Micro offers best-of-breed antivirus and content-security solutions for your corporate network, small and medium business, mobile device or home PC.

For additional information about this threat, see:
Overview
Technical Details

Search a new malware

Tell us how we did. Take our quick survey.