Home > Need Help > Need Help Gaobot?

Need Help Gaobot?

If you need it reopened please PM me or one of the other mods. I’ve since run Norton DiskDoctor and WinDoctor, AdAware 6.181 and Spybot 1.2. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged Others exploit vulnerabilities to infect machines.

Several functions may not work. Limit user privileges on the computer. Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG======Hosts File======127.0.0.1 hityou.com127.0.0.1 www.hityou.com127.0.0.1 180searchassistant.com127.0.0.1 www.180searchassistant.com127.0.0.1 180solutions.com127.0.0.1 www.180solutions.com127.0.0.1 bis.180solutions.com127.0.0.1 config.180solutions.com127.0.0.1 cts.180solutions.com127.0.0.1 downloads.180solutions.com======Security center information======AV: Symantec AntiVirus Corporate Edition======Environment variables======"ComSpec"=%SystemRoot%\system32\cmd.exe"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Wave Systems Corp\Dell Preboot Manager\Access Client\v5\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common While scanning, my system had to shut down and I didn’t catch the reason.

Dommok Newbie Posts: 1 Help need to fight against virus w32.welchia.gen and w32.gaobot.gen « on: April 07, 2004, 08:57:14 PM » Dear All,I am Dominic from Hong Kong.I had been using It is therefore important that you use a strong password – one that cannot be easily guessed by an attacker. this will prevent further infections too. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

http://v4.windowsupd.../en/default.asp firewall download. Heres to ya... Messenger (HKLM) O9 - Extra 'Tools' menuitem: Yahoo! A strong password is one that has at least eight characters, and combines letters, numbers, and symbols.

Please help! Symantec gives detailed instructions on removing GAOBOT.AO, which is fine, but what about GAOBOT.GEN? I lost all username & passwords to all my forums and sites, but got rid of the virus. (Kept hard copy details of my usernames and password so nothing was lost.) Just Thanks again guys - keep it up as your forum and info is very valueable to people like me that is a complete novice to the tech world of pc /

Me Too0 Last Comment Replies Trainer Newbie1 Reg: 13-Nov-2009 Posts: 5 Solutions: 0 Kudos: 1 Kudos0 Re: Need help to remove W32 Gaobot worm Posted: 15-Nov-2009 | 2:01PM • Permalink I Use up-to-date antivirus software. remember to disable system restore, before going on with the removal. Only goes up to XP Quads Quads Norton Fighter25 Reg: 21-Jul-2008 Posts: 16,481 Solutions: 182 Kudos: 3,388 Kudos1 Stats Re: Need help to remove W32 Gaobot worm Posted: 17-Nov-2009 | 6:29AM

Yes, my password is: Forgot your password? Would > this be an appropriate tool for "ao" and "gen"? > > Please help! > > ada > > --- Outgoing mail is certified Virus Free. W32.Welchia.gen and W32.HLLW.Gaobot.genI had done the following in order to remove and prevent the captioned virsus but still failed.About my configuration , I am using Win XP Home in my Notebook Thread Tools Display Modes Help!

If you downloaded the removal tool to the Windows desktop, it will be easier if you first move the tool to the root of the C drive. the infection you have works through systems, not updated. Register now! In many cases, it adds a value to the registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run orHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices This value causes the worm to start when Windows is started.

If this dialog box does not appear, there are two possible reasons:The tool is not from Symantec: Unless you are sure that the tool is legitimate and that you downloaded it mobo, May 3, 2004 #6 KMInfinity Thread Starter Joined: Aug 7, 2003 Messages: 61 THANKS.... Then will our world know the blessings of peace. ~William Ewart Gladstone Quads Norton Fighter25 Reg: 21-Jul-2008 Posts: 16,481 Solutions: 182 Kudos: 3,388 Kudos0 Re: Need help to remove W32 Gaobot Once done did restarted.

If you're not already familiar with forums, watch our Welcome Guide to get started. How to turn on Automatic Updates in Windows 7 How to turn on Automatic Updates in Windows Vista How to turn on Automatic Updates in Windows XP Use up-to-date antivirus software Avast community forum Home Help Search Login Register Avast WEBforum » Other » Viruses and worms (Moderators: Pavel, Maxx_original, misak) » Help need to fight against virus w32.welchia.gen and w32.gaobot.gen

KMInfinity, May 3, 2004 #3 mobo Joined: Feb 23, 2003 Messages: 16,273 Reboot into safe mode and delete:C:\WINDOWS\avserve2.exe Then post a fresh hijack log.

They will be adjusted your computer's time zone and Regional Options settings. Use caution when opening attachments and accepting file transfers. Disable or password-protect file sharing, or set the shared files to Read Only, before reconnecting the computers to the network or to the Internet. With these steps, you should be able to clean the file system.The following is an example command line that can be used to exclude a single drive:"C:\Documents and Settings\user1\Desktop\FxGaobot.exe" /EXCLUDE=M:\ /LOG=c:\FxGaobot.txtAlternatively,

Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site. Top Threat behavior When Win32/Gaobot is run, it copies itself to either the Windows or System directories. However, on the 1st run of the Fix Gaobot Tool I disabled systems restore as stated in shortcut; (to the tee follwed instruc.) http://www.symantec.com/security_response/writeup.jsp?docid=2004-040212-0834-99&tabid=3 This did not work as 15 minutes later For information on this and on how to view the confirmation dialog again, read the document: How to restore the Publisher Authenticity confirmation dialog box.Click Yes or Run to close the

mdturner Guru Norton Fighter25 Reg: 11-Apr-2008 Posts: 4,658 Solutions: 154 Kudos: 1,081 Kudos1 Stats Re: Need help to remove W32 Gaobot worm Posted: 15-Nov-2009 | 2:15PM • Permalink Trainer wrote:I have However, on the 1st run of the Fix Gaobot Tool I disabled systems restore as stated in shortcut; (to the tee follwed instruc.) http://www.symantec.com/security_response/writeup.jsp?docid=2004-040212-0834-99&tabid=3 This did not work as 15 minutes later Then will our world know the blessings of peace. ~William Ewart Gladstone Trainer Newbie1 Reg: 13-Nov-2009 Posts: 5 Solutions: 0 Kudos: 1 Kudos0 Re: Need help to remove W32 Gaobot worm Thanks again guys - keep it up as your forum and info is very valueable to people like me that is a complete novice to the tech world of pc /

All rights reserved. Would > > this be an appropriate tool for "ao" and "gen"? > > > > Please help! > > > > ada > > > > > > > --- General Computing Anti-Spyware Software General Off Topic Feedback Announcements Newsgroups Virus Information Spyware Computer Security Sadie 2004-05-17 23:34:31 UTC PermalinkRaw Message You're welcome.Is your computer sorted now?Sadie-----Original Message-----thanks sadie you were a big help-----Original Message-----Hello,It is doubtful whether you will be able to connect toSymantec,but,just incase,here