HLP Network

News:

Thanks to the hard work of rev_posix and Sandwich, the HLP email system has been fixed!  All registration emails from the past few months have been re-sent.  If you still need help, please sign on to Discord and let us know.  The Discord link can be found in the top navbar under the HLP menu. ヾ(´︶`♡)ﾉ

 
« Previous Thread Next Thread »
Print
Pages: [1]   Go Down

Author Topic: Gaobot virus removal  (Read 929 times)

0 Members and 1 Guest are viewing this topic.

Offline Stealth

  • Braiiins...
  • 211
Gaobot virus removal
on: February 12, 2004, 06:55:32 pm
on my new computer (i installed XP last night) i've got the Gaobot D variant... (it's similar to the MSBLASTER / LOVESAN virus that hit a few months ago)  anyway, i can't install any virus protectors, because somehow it corrupts them, so they can't open.  

i try running Symantek's removal tool, but it says it can't find any viruses... however when i run McAfee's "Free" online virus scan it says it finds multiple infected Gaobot files.

anyone got any hints or suggestions? i've been trying for the last 3 hours
 

Offline GeistKrieger

  • 22
Gaobot virus removal
Reply #1 on: February 12, 2004, 07:20:18 pm
Id lend ya mcafee but i lost the cd.
Hmm ill do a little research for ya.
Never let a good game go to waist. Freespace 2 is last good space game out there. In my godly right Freespace 2 will never die if im around.
-=]GK[:GeistKrieger:=-
 

Offline Fractux

  • 28
Gaobot virus removal
Reply #2 on: February 12, 2004, 08:20:15 pm
Will it only stop several "major" brand products from installing?

What about AntiVir, or SVG? Does TrendMicro's Housecall not work either?
-What exactly gets separated in "mechanically separated chicken" ?
 

Offline Bobboau

  • Just a MODern kinda guy
    Just MODerately cool
    And MODest too
  • 213
Gaobot virus removal
Reply #3 on: February 12, 2004, 08:41:28 pm
well if you only instaled XP last night, just install it again and be sure to install you anti-virus stuff before your network stuff
Bobboau, bringing you products that work... in theory
learn to use PCS
creator of the ProXimus Procedural Texture and Effect Generator
My latest build of PCS2, get it while it's hot!
PCS 2.0.3


DEUTERONOMY 22:11
Thou shalt not wear a garment of diverse sorts, [as] of woollen and linen together
 

Offline Stealth

  • Braiiins...
  • 211
Gaobot virus removal
Reply #4 on: February 12, 2004, 09:11:37 pm
Just did that... here's what i did:

Formatted NTFS (1 partition, "quick"). installed Windows Professional.

i didn't do anything else (didn't go online or anything...) except installing the motherboard drivers (for the NIC, integrated sound, USB, etc.)... i then popped in the McAfee CD, and installed McAfee.  i then popped in another CD with the latest mcafee patch.  i installed the patch successfully.  then i tried opening McAfee.  it opened, but after a few seconds it just shut down completely.  i tried it again,... same thing.  

this is exactly what happened before the second install of XP (when i first posted this topic)... i know i had a virus, but the signiture files and stuff i downloaded wouldn't remove it, and i can't install any (yeah, i've tried three) anti-virus software without it completely shutting down (crashing) after a few seconds of having it open.  

i'm about to (as advised by my friend) just do a complete low-level of the drive, but there's got to be something else that's wrong!

Oh, and for the record i installed all 'critical' security updates in Windows Update (all 31 MB of it)
 

Offline Fractux

  • 28
Gaobot virus removal
Reply #5 on: February 12, 2004, 09:22:38 pm
Are you installing XP and SP1 and your antivirus software with your computer unplugged from your network?

Unless you are behind a firewall, you should do that, other wise the chances of your machine getting infected are extremely high. If you don't have an external firewall... keep your computer unplugged from the network, activate WinXP's firewall, and then download your updates.

[edit]

I was just reading about some info , so you can scratch what i said before.here

They go through a run down of how to remove the virus... here's the brief info... click on the link for detailed info.

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

   1. Disable System Restore (Windows Me/XP).
   2. Update the virus definitions.
   3. Do one of the following:
          * Windows 95/98/Me: Restart the computer in Safe mode.
          * Windows NT/2000/XP: End the Worm process.
   4. Run a full system scan and delete all the files detected as W32.HLLW.Gaobot.BF.
   5. Reverse the changes that the Trojan made to the registry.

For details on each of these steps, read the following instructions.
« Last Edit: February 12, 2004, 09:41:52 pm by 1248 »
-What exactly gets separated in "mechanically separated chicken" ?
 

Offline Sandwich

  • Got Screen?
  • 213
    • Skype
    • Steam
    • Twitter
    • Brainzipper
Gaobot virus removal
Reply #6 on: February 13, 2004, 03:25:04 am
Burn a Knoppix disc and boot off that, then run a Linux virus proggie?
SERIOUSLY...! | {The Sandvich Bar} - Rhino-FS2 Tutorial | CapShip Turret Upgrade | The Complete FS2 Ship List | System Background Package

"...The quintessential quality of our age is that of dreams coming true. Just think of it. For centuries we have dreamt of flying; recently we made that come true: we have always hankered for speed; now we have speeds greater than we can stand: we wanted to speak to far parts of the Earth; we can: we wanted to explore the sea bottom; we have: and so  on, and so on: and, too, we wanted the power to smash our enemies utterly; we have it. If we had truly wanted peace, we should have had that as well. But true peace has never been one of the genuine dreams - we have got little further than preaching against war in order to appease our consciences. The truly wishful dreams, the many-minded dreams are now irresistible - they become facts." - 'The Outward Urge' by John Wyndham

"The very essence of tolerance rests on the fact that we have to be intolerant of intolerance. Stretching right back to Kant, through the Frankfurt School and up to today, liberalism means that we can do anything we like as long as we don't hurt others. This means that if we are tolerant of others' intolerance - especially when that intolerance is a call for genocide - then all we are doing is allowing that intolerance to flourish, and allowing the violence that will spring from that intolerance to continue unabated." - Bren Carlill
 

Offline Windrunner

  • 210
  • The Hammer.
Gaobot virus removal
Reply #7 on: February 13, 2004, 03:31:24 am
try using this removal tool from Avast.

http://www.avast.com/i_idt_171.html
Staffmember: Hard Light Productions
I said a lot of things.  Some of them were even true. - Aldo_14
  

Offline Arc

  • 23
Gaobot virus removal
Reply #8 on: February 13, 2004, 02:15:06 pm
I agree with Fractux - make sure you don't plug in the network cable until after you've got your anti-virus installed. Varients of this virus are capable of spreading through Windows' default administrative network shares so you're probably getting re-infected as soon as you bring up your network card. If that's what's happening, you should run your anti-virus on any other pcs connected to your local network as they could likely be infected as well. Using a bootable cd or (read-only) floppy with AV that supports NTFS would let you avoid reinstalling. Mcafee has a "Rescue Disk", but it doesn't support NTFS. Quote from the user guide: "It is unnecessary for NTFS partitions." :doubt:

If that doesn't help, check the install, update and driver files on your cds in case it's possible one of them got infected before you used them.
Print
Pages: [1]   Go Up
« Previous Thread Next Thread »