Re: agobot

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/19/03


Date: Fri, 19 Dec 2003 14:48:29 -0500

Deke:

What VERSION is the software.

The ENGINE should be v4260
The DAT v4309

If you go to: http://www.networkassociates.com/us/downloads/updates/superdat.asp

You can get the SuperDAT EXE file whuch will make sure you have the latest ENGINE and DAT.

Dave

"deke" <anonymous@discussions.microsoft.com> wrote in message
news:028b01c3c667$6858b140$a101280a@phx.gbl...
|
| >-----Original Message-----
| >You are confused - It's Trend's HouseCall, It's McAfee's
| Stinger.
| >
| >As for the Registry - If you won't do it, take to a local
| a service center. This is a Self
| >Help forum. I can't reach out to your PC and make
| modifications :-)
| >
| >Dave
| >
| >
| >
| >
| >"deke" <anonymous@discussions.microsoft.com> wrote in
| message
| >news:00cd01c3c65f$fc4ddd60$a401280a@phx.gbl...
| >>.
| >| >McAffee's housecall, and TM's Stinger both found, but
| >| could not remove worm. As previously mentioned, I am no
| >| tech, and am terrified of editing the registry.
| >
| >
| >.
| >I'm not saying that I won't, just that I'm wary. At this
| point, I have bought new McAfee basic AV software on CD,
| and it would not install(or at least the scan console
| would not start). I took your advice from another post
| and tried it in safe mode. It is presently scanning.
| Among other things, it has found one instance of
| W32/Gaobot.worm.(g)en. The g in parenthesese could be a q,
| I can't be sure, the name is underlined as a link,
| obliterating the tail of the letter.
| The file name is: C:\System Volume Information\_restore
| {***}\RP10\A0005953,exe, where *** is a string of numbers,
| digits, and dashes. I assume this to be a restore point,
| which brings me to a problem(again). I cannot access
| System Restore. When I try, I get an error message, and
| there is no restore tab on the system properties box.
| I'm trying not to ramble, just don't know what is
| important or not.
| One more thing, since this copy of McAfee was "off the
| shelf" I feel that I probably need to update, but I can't
| get on-line in safe mode.
| AV has finished scanning now, and has found another
| instance of the same worm in
| C:\WINDOWS\system 32\wincffg.exe
| Both have been deleted by AV
|
|
|



Relevant Pages

  • Re: agobot
    ... you have the latest ENGINE and DAT. ... >| and tried it in safe mode. ... I assume this to be a restore ...
    (microsoft.public.security.virus)
  • 3280277 - ynlg
    ... AVERT Labs - Beaverton ... Current Scan Engine Version:5100.0194 ... Current DAT Version:4982.0000 ... Assistance with detection and cleaning or removal of viruses or trojans ...
    (Linux-Kernel)
  • 1472560 - uyieuvhg
    ... Current Scan Engine Version:4.3.20 ... Current DAT Version:4400 ... Thank you for your submission. ... Virus Information Library: ...
    (comp.lang.python)
  • 1456687 - test
    ... Current Scan Engine Version:4.3.20 ... Current DAT Version:4399 ... Thank you for your submission. ... Virus Information Library: ...
    (comp.lang.python)