gaobot variant?

From: Xavier Valdés (dtnospam_at_teleline.com)
Date: 02/09/04 

Date: Mon, 9 Feb 2004 16:27:30 +0100

Hi all,

We recently got a virus which we could not find documentation of. Although
it was similar to GAOBOT,
none fix tool was unable to find and remove it... Its symptoms were:
- svpol.exe.POLY was created in system32 folder
- same process running in machine
- registry keys associated
The results were every computer had a dr.Watson error telling us something
about RPC and every DCOM
functionality failled. Although we thought it was a virus that uses rpc bug,
we don't know which is the name
of virus and why symantec removal tools and Panda do not detect it...
Anyone knows something about that?
Thanks a lot,
Xavi

Relevant Pages

  • Re: Going crazy over this one!
    ... I kept the Symantec W32.Blaster.Worm Fix Tool 1.0.6.1 ... hard drives, it came out with the following message: ... since I have Symantec Anti- ... >program about any virus or trojans... ...
    (microsoft.public.windows.terminal_services)
  • Re: gaobot variant?
    ... > We recently got a virus which we could not find documentation of. ... > rpc bug, we don't know which is the name ... > of virus and why symantec removal tools and Panda do not detect it... ... We have a Gaobot variant infecting our network but the file involved is ...
    (microsoft.public.security.virus)
  • Re: cant open anything but IE in XP
    ... > I got a virus, norton identified as GAOBOT, I downloaded ... > the fix tool, which did not find the virus. ... This message is virus free as far as I can tell. ...
    (microsoft.public.scripting.virus.discussion)
  • RE: svpol??
    ... >We recently got a virus which we could not find documentation of. ... >none fix tool was unable to find and remove it... ... I have not seen this before, but would encourage you to submit the binaries to your AV Vendor ASAP along with the ... If you are using something else then you will have google that vendor for their virus sample submission page ...
    (microsoft.public.security.virus)
  • svpol??
    ... We recently got a virus which we could not find documentation of. ... it was similar to GAOBOT, ... none fix tool was unable to find and remove it... ... Although we thought it was a virus that uses rpc bug, ...
    (microsoft.public.security.virus)
Quantcast