new Gaobot Variant?
Results 1 to 2 of 2

Thread: new Gaobot Variant?

  1. #1

    Question new Gaobot Variant?

    I seem to be stumbling onto a new version of gaobot as w32\GaoBot.worm.gen.bi ...has anybody else run into this?

    the file is named winhttps.exe and is hooking itself into the registry under the

    LocalMachine\Software\Microsoft\Windows\CurrentVersion\RunServices

    I've noticed that it has happened on about 5-6 computers where I work which are running Windows 2000. The newest DAT file from McAfee has been removing this, but I know that everybody doesnt have that. I think the newest windows updates are preventing this, but im not certain on that.

    Has anybody else seen this, or have any information about it?

    edit --
    spelling error :-(
    [gloworange]Antyx[/gloworange] .. formerly lupdawg

  2. #2
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    No signs here yet.............guess it cannot be much different as that is a "generic" detection that you are getting.

    And y'all be careful with them dang newfangled motosickles
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides