AVG antivirus not detecting Gaobot

[Ron Martell]

It appears that AVG antivirus - both the free version 6 and the
purchased version 7 - is failing to detect the W32.Gaobot virus, of
which there are a number of variants.

This failure has been confirmed by a number of users who have known
copies of the virus (detected by Norton, McAfee, eTrust and Kaspersky)
that AVG reports as not being infected.

Apparently Avast, another free antivirus, is also missing this one.
Also McAfee Stinger does not list Gaobot among the 41 viruses that it
detected. However the full McAfee antivirus does find it.

The problem has been reported to Grisoft, along with samples of
infected files.

Gaobot exploits the same vulnerability as Sasser and is quite recent.
Anyone who had a Sasser infected machine should also check for Gaobot
with an antivirus scanner other than AVG.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

 

[Guest]

-----Original Message-----
It appears that AVG antivirus - both the free version 6 and the
purchased version 7 - is failing to detect the W32.Gaobot virus, of
which there are a number of variants.

This failure has been confirmed by a number of users who have known
copies of the virus (detected by Norton, McAfee, eTrust and Kaspersky)
that AVG reports as not being infected.

Apparently Avast, another free antivirus, is also missing this one.
Also McAfee Stinger does not list Gaobot among the 41 viruses that it
detected. However the full McAfee antivirus does find it.

The problem has been reported to Grisoft, along with samples of
infected files.

Gaobot exploits the same vulnerability as Sasser and is quite recent.
Anyone who had a Sasser infected machine should also check for Gaobot
with an antivirus scanner other than AVG.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."
.
Check out this website, it may give you the answer.

http://www.sophos.com/virusinfo/analyses/w32agobotau.html

 

[Ron Martell]

It appears that AVG antivirus - both the free version 6 and the
purchased version 7 - is failing to detect the W32.Gaobot virus, of
which there are a number of variants.

The latest update to AVG (released today) is now detecting this virus.
It reports it as Worm/Agobot.(variant).

For AVG6 Free this is with Program Version 6.0.649 and virus database
441.

For AVG7 Pro the virus database version is 262.9.17


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

 

[Alex Nichol]

It appears that AVG antivirus - both the free version 6 and the
purchased version 7 - is failing to detect the W32.Gaobot virus, of
which there are a number of variants.

It appears that as of about 2 hours ago, they have an update that does -
Help - Program info will then give Virus database 441

 

[Brian C]

It appears that as of about 2 hours ago, they have an update that does -
Help - Program info will then give Virus database 441

A little of topic, what port does this virus come in from?

Brian C.

 

[Steve Nielsen]

A little of topic, what port does this virus come in from?

Brian C.

Depends on which variant of W32.Gaobot, there are over twenty of them
and the ports and vunerabilities they exploit vary a lot.

Go here:
http://www.symantec.com/search/

Enter in "W32.Gaobot" for the search. You'll get 31 hits, 24 of which
appear to be variants of it. Read through them and you'll see.

Steve