new Gaobot variant??

From: PHiL M. (_at_.com.hk)
Date: 04/29/04 

Date: Thu, 29 Apr 2004 13:16:09 +0800

I come across a few Windows XP computers with the following symptoms and
haven't been able to identify the virus type correctly.

1. Runs SCVHOST.exe on startup.
2. Downloads EXE files to C: root.
3. Blocks access to antivirus programs websites using HOSTS.
4. Disables antivirus program's online/auto protection service.
5. Some even reported LSASS.exe error and shuts down in 60 seconds (but
not sure if it is related to the others).

The only virus I know that can do some of the above is W32.Gaobot or a
variant of it, but I cannot find info on one variant that has at least
all symptoms from #1 - #4.

Have I identified the virus correctly? Thanks.

Relevant Pages

  • Re: do i have a disease? dont know where else to go...
    ... > brain to write software. ... symptoms caused by non-fatal conditions like stress? ... what kind of virus? ... > test reliably whether it is Lyme. ...
    (sci.med.diseases.lyme)
  • Re: Where have all the doctors gone?
    ... Where have all the doctors gone? ... On her Web site, Lyon describes her daughter's symptoms, which were ... Antibiotics do help to control the virus but not ...
    (sci.med.diseases.lyme)
  • Re: Absurd Vaccine Marketing -- Cervical Cancer Vaccinations for Boys - Articles
    ... Before you start spreading FUD from a web site that doesn't know what it's ... the virus that causes cervical cancer but isn't symptomatic. ... it on and Billy becomes a carrier, also with no symptoms. ... Get Credit Where Credit Is Due ...
    (misc.consumers)
  • Re: Where have all the doctors gone?
    ... The daughter's neurological symptoms return as soon as ... The daughter's neurological symptoms will continue to return ... Antibiotics do help to control the virus but not ...
    (sci.med.diseases.lyme)
  • Re: RegEdit opens and then immediately closes
    ... The symptoms you are experiencing are a symptom ... then restart in Safe mode and run the ... This is necessary because the virus that is causing this ... Windows help - www.rickrogers.org ...
    (microsoft.public.windowsxp.basics)