DownadUp - The reason behind all security software's update failure.

Anyone with a PC should know that there is a new worm out there which by some estimates has infected as many as one out of every three PCs worldwide. Known as Downadup or Conficker, it has spread rapidly despite attempts by Microsoft to issue updated security patches to its Windows operating system. The problem though is that there are many computers that do not have this Microsoft patch installed and this still makes them sitting ducks to the horrible Downadup infection.
Downadup can do some serious damage to your system. For one, Downadup changes your Window settings so that it can infect other PC’s that are over your network. Downadup can also make copies of itself each time that it reboots.
One of the most evil things that Downadup can do is to stop you from being able to visit many security websites so that you will have a hard time removing the infection.

Downadup Bad Behavior:

* Downadup may install without your consent.
* Downadup may install other types of spyware/adware.
* Downadup may compromise your privacy and security.
* Downadup may be difficult to uninstall.

Downadup – Automatic Removal Instructions:

Symantec W32.Downadup Removal Tool

Conficker Remover

Downadup – Manual Removal Instructions:

WARNING: Downadup manual detection and removal process is difficult. You’re required to access sensitive files in your machine. NOT recommended unless you’re an expert in this field.

Unregister Downadup DLLs:

%All Users Application Data%\[RANDOM FILE NAME].dll
%Program Files%\Movie Maker\[RANDOM FILE NAME].dll
%Program Files%\Internet Explorer\[RANDOM FILE NAME].dll
%Temp%\[RANDOM FILE NAME].dll
vhoinp.dll
%System%\[RANDOM FILE NAME].dll

Remove Downadup files:

%Temp%\[Random].tmp
%System%\[Random].tmp
%All Users Application Data%\[RANDOM FILE NAME].dll
%Program Files%\Movie Maker\[RANDOM FILE NAME].dll
%Program Files%\Internet Explorer\[RANDOM FILE NAME].dll
%Temp%\[RANDOM FILE NAME].dll
vhoinp.dll
%System%\[RANDOM FILE NAME].dll

Remove Downadup registry values:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost, netsvcs = %Previous data% and %Random%
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\”ImagePath” = %SystemRoot%\system32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{random}\Parameters\”ServiceDll” = “[PATH OF WORM]”