
W32.GAOBOT.GEN
SPREADS IN THE WILD
Virus Name : W32.Gabot.Gen.Worm
Alias : W32.Agobot.Gen,
Backdoor.Agobot.Gen , W32/Agobot, WORM_AGOBOT,
W32/Gaobot.gen.worm, Backdoor.Rbot.Gen
Virus type : Network
worm
Threat
level : Medium
Virus
details :
Gaobot.Gen is a generic
detection for variants of the Gaobot worm family.
Gaobot is a network worm spreads using network
shares with weak password or no password. New
variants of Gaobot worm spreads using RPC DCOM
and WebDAV Windows vulnerabilities. This worm
also contains backdoor ability.
When executed, Gaobot
worm copies to Windows System folder, and
modifies the registry RUN section to load
automatically. The registry modification is given
below.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
"key name" = "<file
name>"
Gaobot worm connects to
IRC channel and allows full access to the
infected system. Using this backdoor facility,
hackers can steal data from the infected systems.
This worm is also known as W32.Agobot.Gen,
Backdoor.Agobot.Gen , W32/Agobot, WORM_AGOBOT,
W32/Gaobot.gen.worm.
How can I protect my
system?
Solo has incorporated
Gaobot worm and its variants in signature file to
protect users from this worm attack. Solo
antivirus registered users are already protected
from this worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
You need to install
security patches from http://windowsupdate.microsoft.com to close security hole
in your Windows operating system. These steps to
help ensure your PC is protected.
How
to remove this worm?
If you are already
infected with this worm, run Solo anti-virus and
choose Delete option to remove the worm
components.
Solo
antivirus can detect and remove Gaobot aka Agobot
worm safely. Use the following link to Download
30 day trial version of Solo antivirus
to
remove viruses from your computer.

Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
You can
purchase Solo antivirus using the link 

|