new Gaobot Variant?
Results 1 to 2 of 2

Thread: new Gaobot Variant?

  1. #1

    Question new Gaobot Variant?

    I seem to be stumbling onto a new version of gaobot as w32\ ...has anybody else run into this?

    the file is named winhttps.exe and is hooking itself into the registry under the


    I've noticed that it has happened on about 5-6 computers where I work which are running Windows 2000. The newest DAT file from McAfee has been removing this, but I know that everybody doesnt have that. I think the newest windows updates are preventing this, but im not certain on that.

    Has anybody else seen this, or have any information about it?

    edit --
    spelling error :-(
    [gloworange]Antyx[/gloworange] .. formerly lupdawg

  2. #2
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    United Kingdom: Bridlington
    No signs here yet.............guess it cannot be much different as that is a "generic" detection that you are getting.

    And y'all be careful with them dang newfangled motosickles
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts