Results 1 to 2 of 2

Thread: new Gaobot Variant?

  1. #1

    Question new Gaobot Variant?

    I seem to be stumbling onto a new version of gaobot as w32\GaoBot.worm.gen.bi ...has anybody else run into this?

    the file is named winhttps.exe and is hooking itself into the registry under the

    LocalMachine\Software\Microsoft\Windows\CurrentVersion\RunServices

    I've noticed that it has happened on about 5-6 computers where I work which are running Windows 2000. The newest DAT file from McAfee has been removing this, but I know that everybody doesnt have that. I think the newest windows updates are preventing this, but im not certain on that.

    Has anybody else seen this, or have any information about it?

    edit --
    spelling error :-(
    [gloworange]Antyx[/gloworange] .. formerly lupdawg

  2. #2
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    No signs here yet.............guess it cannot be much different as that is a "generic" detection that you are getting.

    And y'all be careful with them dang newfangled motosickles

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •