Help With Trojan!

[TomRainking]

It seems as if my college network has yet again been haunted by a virus "Gaobot". I cannot keep my cpu from getting that shutdown message "NT/Authority will shut down your cpu in 1 minute". Norton catches it and deletes it, but i think i need to download a security patch...but of course i have the pirated version of windows. Can i still download the security patches from Microsoft? Also, the reason i think its in the network is that when i'm not connected to the internet, my cpu never gets that message, but as soon as i connect...there's that message. Any help would be appreciated...THANKS

[Kyle06]

It seems as if my college network has yet again been haunted by a virus "Gaobot". I cannot keep my cpu from getting that shutdown message "NT/Authority will shut down your cpu in 1 minute". Norton catches it and deletes it, but i think i need to download a security patch...but of course i have the pirated version of windows. Can i still download the security patches from Microsoft? Also, the reason i think its in the network is that when i'm not connected to the internet, my cpu never gets that message, but as soon as i connect...there's that message. Any help would be appreciated...THANKS

yes I think you can still use the patch but I don't know for sure you can try

[shawners]

You can get the patch =) IT sometimes need the original disk, or gave me that thing one time or another for a bought *Cough*version of Office 2002... Or i like to call it, OFTEN Fix. =)

[Pebbles100]

If all else fails, you can try to remove it manually. I follow Symantec's removal instructions when that sort of thing happens.

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.az.html

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.p.html

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.an.html

-- dunno which variant you have...

[phalkon30]

I had a real nice post for you and it didn't send....bah

What version of windows? I"ll assume XP for now. Windows update should work great, I don't think you'll have a problem (SP1 might not be available to you, but you can find keygens if you look on google).

If you're worried about windows update, I suggest a program called BigFix from http://bigfix.com/website/index.html . Subscribe to all applicable subscriptions (all free) and it will get the updates for you, manually, not through windows update. It also fixes more than windows update does sometimes.

You can also check out this site: http://grc.com/freepopular.htm and use some of his programs. I've used a few of them and never had a problem.

If you're on XP go to www.blackviper.com and follow his XP Services guide, disable any uneeded services (but remember to READ descriptions).

Hmm, past that, turn on the XP firewall, or run a different firewall if you have one, and you should be safe.

Ah, also forgot to mention Spybot S&D. It removes Spyware/Adware/any other malicious things you may pick up on websites. http://security.kolla.de

[TomRainking]

I used the Big Fix...and installed like 6 security updates and i havent received that shutdown message since!!! The only one i didnt install is one that is labeled "UPDATE: Internet Explorer 6 Service Pack 1 Available". I do have XP, the pirated one. I heard that SP1 doesnt work or messes up your cpu or something...is this true? Also, i still get that virus, guess my cheap University has not interest in fixing it. In the span of 2 hrs, Norton recieved and deleted the virus 22 times!!!... Thanks for the help and please help with the SP1 Question!!!

[tMoD]

The Big Fix is a great program. I love that thing.

[phalkon30]

There's a difference between XP serivce pack one, and Internet Explorer Service Pack one. You can do the IE SP1 without a problem.

You can most likely do XP SP1 also, the worst that happens is it tells you it can't install.

Check out Pebbles100 post. Tell us the exact variant, we may be able to help you stop it.

[Lord_of_the_Dense]

I'll stick with Symantec-- it has not gone wrong yet. And it has also beat down many hoaxes that people insist on spamming each other with.

[TomRainking]

here's the name of the virus as it appears when Norton Deletes it. W32.HLLW.Gaobot.AO It says it is affecting C:\Windows\system32\winhlpp3.exe ... By the way...i had an 1hr and a half calc 3 class this morning, when i came back, Norton caught the virus 28 times.

[Pebbles100]

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html

Read that link. A few patches are located on the top of the article. If you want to manually remove it, the instructions are located near the bottom. For this virus, they are pretty are basic - pay close attention to what your doing when you remove it from your registry. If you haven't already, I would put up a firewall for added security. Never keep personal info on your computer --- bank account info, passwords, or SS#'s etc.

[MikeHunt]

@TomRainKing...this site has some useful FREE tools and programs for XP sp-1 situations....changing XP settings ....etc. (make sure to scroll all the way down the homepage...there is a variety of stuff there)

www.brainwave.is.dreaming.org