Re: new Gaobot variant??
From: PHiL M. (_at_.com.hk)
Date: 04/29/04
- Next message: PHiL M.: "Re: new Gaobot variant??"
- Previous message: anonymous_at_discussions.microsoft.com: "virus?"
- In reply to: S. Pidgorny
: "Re: new Gaobot variant??" - Next in thread: Karl Levinson [x y] mvp: "Re: new Gaobot variant??"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 Apr 2004 19:30:10 +0800
Thanks. However, I don't have any access to the infected computers.
Will pass the info on.
"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
news:OakxVldLEHA.624@TK2MSFTNGP11.phx.gbl...
| Most likely you did.
|
| You can submit alleged virus to Av vendors for analysis, for example:
|
| http://www.sarc.com/avcenter/submit.html
|
| --
| Svyatoslav Pidgorny, MVP, MCSE
| -= F1 is the key =-
|
| "PHiL M." <@.com.hk> wrote in message
| news:eNASelaLEHA.3696@TK2MSFTNGP09.phx.gbl...
| > I come across a few Windows XP computers with the following symptoms
and
| > haven't been able to identify the virus type correctly.
| >
| > 1. Runs SCVHOST.exe on startup.
| > 2. Downloads EXE files to C: root.
| > 3. Blocks access to antivirus programs websites using HOSTS.
| > 4. Disables antivirus program's online/auto protection service.
| > 5. Some even reported LSASS.exe error and shuts down in 60 seconds
(but
| > not sure if it is related to the others).
| >
| > The only virus I know that can do some of the above is W32.Gaobot or
a
| > variant of it, but I cannot find info on one variant that has at
least
| > all symptoms from #1 - #4.
| >
| > Have I identified the virus correctly? Thanks.
| >
| >
| >
|
|
- Next message: PHiL M.: "Re: new Gaobot variant??"
- Previous message: anonymous_at_discussions.microsoft.com: "virus?"
- In reply to: S. Pidgorny
: "Re: new Gaobot variant??" - Next in thread: Karl Levinson [x y] mvp: "Re: new Gaobot variant??"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
