 |  |  |  |  |  |  |  |
w32.gaobot and variants still on network
 |
iv been at it for over a week now.trying to get w32.goabot and its variants
off the network. network is 3 servers, 35 workstations, unknown amount wireless laptops. im running NAV. and Fprot. i have operating sys nt4, 98, me, w2k, xp.. servers are nt4, linux, w2k.
the file it has created is wmon32.exe or wmon23.exe.
ive deleted all in registry and in windows dir.
the effects are at any givin time all the printers will empty thier trays printing garbage (a shockwave file between 125k to 135k)
under system32/spool/printers ill find 25 000 till 100 000 files in que to be printed !!!!
my final act to stop the hack was to disconnect the dsl from the network..!
any comments would be welcome
off the network. network is 3 servers, 35 workstations, unknown amount wireless laptops. im running NAV. and Fprot. i have operating sys nt4, 98, me, w2k, xp.. servers are nt4, linux, w2k.
the file it has created is wmon32.exe or wmon23.exe.
ive deleted all in registry and in windows dir.
the effects are at any givin time all the printers will empty thier trays printing garbage (a shockwave file between 125k to 135k)
under system32/spool/printers ill find 25 000 till 100 000 files in que to be printed !!!!
my final act to stop the hack was to disconnect the dsl from the network..!
any comments would be welcome
•
•
Join Date: Feb 2004
Posts: 10,110
Reputation: 
Solved Threads: 768
|
Similar Threads
- Cant open ".exe" nor other files (Windows NT / 2000 / XP)
- Please, HJT log help requested (II) ! (Viruses, Spyware and other Nasties)
- IE/Trojan Problems - Desktop Trojan (Viruses, Spyware and other Nasties)
- Redirect of Google to Porn (Viruses, Spyware and other Nasties)
- Another hotoffers hijacking problem.. (Viruses, Spyware and other Nasties)
- P4 80*c Help! (Motherboards, CPUs and RAM)
- Internet Security Keeps Resetting To Custom (HiJackThis Log) (Viruses, Spyware and other Nasties)
- svchost.exe *sigh* (Windows NT / 2000 / XP)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Hijack Log (Had trojan dropper small)
- Next Thread: #37049 Hjacker
Views: 1205 | Replies: 1
| Thread Tools | Search this Thread |
Latest Viruses, Spyware and other Nasties Posts
Related Forum Features
Tag cloud for Viruses, Spyware and other Nasties
acrobat adobe adware anti-malware anti-virussitesaccessissue antivirus apple attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial conficker connect control cyber cybercrime cyberwarfare ddos education email europe exam exploit fake fancheckvirus gaming gtaiv halloween herss.exe hijack hosting internet iphone kaspersky legal malware mcafee messagelabs microsoft mobile msn nazi news obama onlinethreats paedophile parents patch pc pdf phishing police policeprovirusmba-mblockedinternetaccess president pro redirect report research risk rogueantivirus rootkit samhain sans search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen threat translate trojan unabletoaccessanti-virussites unwanted update usa virus viruses vista volume vulnerability war warning windows worm yahoo zero-day zeroday
