| Discovered on: May 26, 2004
Description:
W32.Gaobot.RB is a variant of W32.HLLW.Gaobot that attempts to spread
to network shares. It allows access to an infected computer through an IRC
channel.
The worm uses multiple vulnerabilities to spread, including:
W32.Gaobot.RB is compressed with ASPack, IHMOWrap3, and UPX.
Removal Instructions For Symantec & Norton Users:
- Disable System Restore (Windows Me/XP).
- Update the virus definitions.
- Restart the computer in Safe mode.
- Run a full system scan and delete all the files detected as
W32.Gaobot.RB.
- Delete the value that was added to the registry.
|
| |
|
Our
Staff Recommends
 
|
Top
Ranked Software for Anti-Virus,
Spyware, Firewall,
Adware
Remover and everything else for software.
I
Warned You - Software and Computer Protection
 
|
