Results 1 to 2 of 2

Thread: new Gaobot Variant?

  1. #1

    Question new Gaobot Variant?

    I seem to be stumbling onto a new version of gaobot as w32\GaoBot.worm.gen.bi ...has anybody else run into this?

    the file is named winhttps.exe and is hooking itself into the registry under the


    I've noticed that it has happened on about 5-6 computers where I work which are running Windows 2000. The newest DAT file from McAfee has been removing this, but I know that everybody doesnt have that. I think the newest windows updates are preventing this, but im not certain on that.

    Has anybody else seen this, or have any information about it?

    edit --
    spelling error :-(
    [gloworange]Antyx[/gloworange] .. formerly lupdawg

  2. #2
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    United Kingdom: Bridlington
    No signs here yet.............guess it cannot be much different as that is a "generic" detection that you are getting.

    And y'all be careful with them dang newfangled motosickles

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts