Symantec Security Response has developed a removal tool to clean the infections of the following W32.HLLW.Gaobot variants:
· W32.HLLW.Gaobot.AG
· W32.HLLW.Gaobot.AO
· W32.Gaobot.SA
· W32.Gaobot.SY
· W32.Gaobot.ZX
· W32.Gaobot.ADX
· W32.Gaobot.AFJ
· W32.Gaobot.AJD
· W32.HLLW.Gaobot.Gen
· W32.Gaobot.BOW
· W32.Gaobot.BUU
Note: W32.HLLW.Gaobot.gen is a generic detection that detects numerous variants of W32.HLLW.Gaobot.
The removal tool will remove many but not all variants that are detected as W32.HLLW.Gaobot.gen.
The W32.Gaobot Removal Tool does the following:
· Terminates the W32.Gaobot viral processes and services.
· Deletes the W32.Gaobot files.
· Deletes the dropped files.
· Deletes the registry values that the worm added.
· Modifies the hosts file by removing invalid entries which prevent access to various antivirus related websites
If the removal tool cannot remove the variant of W32.HLLW.Gaobot.gen that has infected your computer, follow the manual removal instructions in the
W32.HLLW.Gaobot.Gen writeup.
Tip:
Author's Site
Internode![Bookmark and Share [download_title]](./images/icons/share.gif){kind=icon}
Recommended Download:
