W32.Gaobot family of worms
Discovery began in October 2002
The W32.Gaobot family of network worms began to surface in October 2002 and several variants have been released since that time. These worms propogate using multiple vulnerabilities including:
Most variants of Gaobot attempt to spread through network shares via weak passwords. It also allows access to an infected computer through IRC channels. Most variants try to prevent access to known anti-virus websites, stop anti-virus software from running on your computer, and steal information from your computer such as passwords, e-mail addresses, and files.
Removal
You can find more information and removal instructions as well as tools for each variant from Symantec from the following links:
- W32.Gaobot.BIQ
September 9, 2004
- W32.Gaobot.BIE
September 7, 2004
- W32.Gaobot.BIA
September 3, 2004
- W32.Gaobot.BAJ
August 2, 2004
- W32.Gaobot.AZT
July 18, 2004
- W32.Gaobot.AUS
June 28, 2004
- W32.Gaobot.AQS
June 7, 2004
- W32.Gaobot.AOL
June 4, 2004
- W32.Gaobot.RB (a.k.a. W32/Gaobot.worm.gen.e)
May 26, 2004
- W32.Gaobot.FO (a.k.a. W32/Gaobot.worm.gen.d)
May 26, 2004
- W32.Gaobot.ALW
May 25, 2004
- W32.Gaobot.ALV
May 25, 2004
- W32.Gaobot.ALU
May 20, 2004
- W32.Gaobot.ALO
May 18, 2004
- W32.Gaobot.AIS
May 14, 2004
- W32.Gaobot.AJJ
May 11, 2004
- W32.Gaobot.AJD
May 11, 2004
- W32.Gaobot.AJE
May 11, 2004
- W32.Gaobot.AJD
May 11, 2004
- W32.Gaobot.AFW
April 29, 2004
- W32.Gaobot.AFJ
April 27, 2004
- W32.Gaobot.AFC
April 29, 2004
- W32.Gaobot.ADX
April 24, 2004
- W32.Gaobot.ADW
April 23, 2004
- W32.Gaobot.ADV
April 22, 2004
- W32.Gaobot.ADN
April 21, 2004
- W32.Gaobot.AAY
April 15, 2004
- W32.Gaobot.ZW
April 12, 2004
- W32.Gaobot.ZX
April 12, 2004
- W32.Gaobot.YN
April 8, 2004
- W32.Gaobot.YC
April 7, 2004
- W32.Gaobot.WX
April 6, 2004
- W32.Gaobot.WO
April 6, 2004
- W32.Gaobot.UM
April 2, 2004
- W32.Gaobot.UL
April 1, 2004
- W32.Gaobot.UJ
April 1, 2004
- W32.Gaobot.SY
March 26, 2004
- W32.Gaobot.SN
March 24, 2004
- W32.Gaobot.SA
March 23, 2004
- W32.HLLW.Gaobot.RF
March 22, 2004
- W32.HLLW.Gaobot.RQ
March 20, 2004
- W32.HLLW.Gaobot.RS
March 17, 2004
- W32.HLLW.Gaobot.JB February 4, 2004
- W32.HLLW.Gaobot.FQ January 12, 2004
- W32.HLLW.Gaobot.FL January 6, 2004
- W32.HLLW.Gaobot.FB January 4, 2004
- W32.HLLW.Gaobot.EF December 12, 2003
- W32.HLLW.Gaobot.EE December 11, 2003
- W32.HLLW.Gaobot.DK December 5, 2003
- W32.HLLW.Gaobot.DJ November 21, 2003
- W32.HLLW.Gaobot.gen November 21, 2003
- W32.HLLW.Gaobot.CA November 17, 2003
- W32.HLLW.Gaobot.CB November 4, 2003
- W32.HLLW.Gaobot.BZ November 1, 2003
- W32.HLLW.Gaobot.BV October 31, 2003
- W32.HLLW.Gaobot.BT
October 30, 2003
- W32.HLLW.Gaobot.BM October 28, 2003
- W32.HLLW.Gaobot.BI October 27, 2003
- W32.HLLW.Gaobot.BH October 27, 2003
- W32.HLLW.Gaobot.BF October 27, 2003
- W32.HLLW.Gaobot.BE
October 24, 2003
- W32.HLLW.Gaobot.BC October 24, 2003
- W32.HLLW.Gaobot.BB October 23, 2003
- W32.HLLW.Gaobot.AP October 10, 2003
- W32.HLLW.Gaobot.AO
September 30, 2003
- W32.HLLW.Gaobot.AN
September 29, 2003
- W32.HLLW.Gaobot.AG
September 23, 2003
- W32.HLLW.Gaobot.AF
September 16, 2003
- W32.HLLW.Gaobot.AE
September 9, 2003
- W32.HLLW.Gaobot.AA
August 21, 2003
- W32.HLLW.Gaobot.P
April 4, 2003
- W32.HLLW.Gaobot
October 22, 2002
|