Name :	Worm:W32/Downadupjob.gen
Detection Names :	Worm:W32/Downadupjob.gen
Size:	350
Category:	Malware
Type:	Worm
Platform:	W32
Date of Discovery:	January 01, 2009

Worm:W32/Downadupjob.gen is detection for .JOB files used by the Downadup worm.

Worm:W32/Downadupjob.gen!A

Downadupjob is generic detection of .JOB files created by the Downadup worm.

Windows Task Scheduler Task Object

Downadup attempts to spread itself using Windows Scheduled Tasks.

Legitimate tasks are usually located in the following folder:


The .JOB file defines a scheduled task, which in Downadup's case triggers an execution of the worm library via rundll32.exe.

Please see the following descriptions for additional details:

F-Secure Anti-Virus detects this malware with the following updates:
[FSAV_Database_Version]
Version = 2009-01-22_12.