W32.HLLW.Gaobot.gen

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi
Several times a week, I have a virale alert with the worm notified ahead. I
dowloaded the FxGaobot.exe but each time I run it, it says that it doesn't
find any Gaoobot worm...
I really don't understand whats going on...Does somebody have an idea ?
Thanks
Marlène
 
There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

You ask the question, but don't ste any facts about the detection nor what detected it.
I think whatever gererated your "virale alert " blocked the infection, thus, you couldn't
find it with the utility you tried.

Just to be sure, perform the following...

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt196.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point
9) Please report back your results

Dave






| Hi
| Several times a week, I have a virale alert with the worm notified ahead. I
| dowloaded the FxGaobot.exe but each time I run it, it says that it doesn't
| find any Gaoobot worm...
| I really don't understand whats going on...Does somebody have an idea ?
| Thanks
| Marlène
|
 
Thank u M. Lipman for your fast answer and sorry not being in the write News
group.

The Gaobot worm was detected by my Norton-Antivirus software and I got the
tool to fix it on Symantec Web site. Does this information change something
about your recommandations ?

Marlène
 
No. They stand. There are such things as False Positives and False Negatives. the only
way to prove either is by different software.

Dave




| Thank u M. Lipman for your fast answer and sorry not being in the write News
| group.
|
| The Gaobot worm was detected by my Norton-Antivirus software and I got the
| tool to fix it on Symantec Web site. Does this information change something
| about your recommandations ?
|
| Marlène
|
|
|
|
| "David H. Lipman" wrote:
|
| > There are anti virus News Groups specifically for this type of discussion.
| >
| > microsoft.public.scripting.virus.discussion
| > microsoft.public.security.virus
| > alt.comp.virus
| > alt.comp.anti-virus
| >
| > You ask the question, but don't ste any facts about the detection nor what detected it.
| > I think whatever gererated your "virale alert " blocked the infection, thus, you
couldn't
| > find it with the utility you tried.
| >
| > Just to be sure, perform the following...
| >
| > 1) Download the following two items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download sysclean.com and place it in that directory.
| > Dowload the signature files (pattern files) by obtaining the ZIP file.
| > For example; lpt196.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > sysclean.com.
| >
| > 2) Disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 3) Reboot your PC into Safe Mode
| > 4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
| > clean/delete any infectors found
| > 5) Restart your PC and perform a "final" Full Scan of your platform
| > 6) Re-enable System Restore and re-apply any System Restore preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| > 7) Reboot your PC.
| > 8) Create a new Restore point
| > 9) Please report back your results
| >
| > Dave
| >
| >
| >
| >
| >
| >
| > | > | Hi
| > | Several times a week, I have a virale alert with the worm notified ahead. I
| > | dowloaded the FxGaobot.exe but each time I run it, it says that it doesn't
| > | find any Gaoobot worm...
| > | I really don't understand whats going on...Does somebody have an idea ?
| > | Thanks
| > | Marlène
| > |
| >
| >
| >
 
Back
Top