GAOBOT Worm reinfecting computers

[Lorrie]

The GAOBOT worm which has been infecting and reinfecting computers.
We have not been successful in cleaning numerous computers. We start
the systems in safe mode make sure that the admin account has a secure
password update all critical updates on system run both of the
fxgaobot tools we run the latest version of the stinger program make
sure that our antivirus program is up to date on definitions and run a
full scan of the computer but the worm seems to make its way back into
the computer!!! HELP

Lorrie Amerson
Eastern Virginia Medical School
LAN Administrator
(e-mail address removed)
fax: 757-446-5702

 

[Carey Frisch [MVP]]

There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------


| The GAOBOT worm which has been infecting and reinfecting computers.
| We have not been successful in cleaning numerous computers. We start
| the systems in safe mode make sure that the admin account has a secure
| password update all critical updates on system run both of the
| fxgaobot tools we run the latest version of the stinger program make
| sure that our antivirus program is up to date on definitions and run a
| full scan of the computer but the worm seems to make its way back into
| the computer!!! HELP
|
| Lorrie Amerson
| Eastern Virginia Medical School
| LAN Administrator
| (e-mail address removed)
| fax: 757-446-5702

 

[Danny Mingledorff]

The GAOBOT worm which has been infecting and reinfecting computers.
We have not been successful in cleaning numerous computers. We start
the systems in safe mode make sure that the admin account has a secure
password update all critical updates on system run both of the
fxgaobot tools we run the latest version of the stinger program make
sure that our antivirus program is up to date on definitions and run a
full scan of the computer but the worm seems to make its way back into
the computer!!! HELP

Lorrie Amerson
Eastern Virginia Medical School
LAN Administrator
(e-mail address removed)
fax: 757-446-5702

Have you tried the suggestions from the W2K newsgroup?

....danny