|
-
August 19th, 2004, 01:42 PM
#1
W32.Xabot.Worm
Clicked on a video clip and allowed WMP9 to access the net through ZoneAlarm 2.6. Never did see the video, but almost immediately got a ZoneAlarm Program Alert. All it says is "Do you want to allow to access the internet?'. That is not a typo, ZA is not saying what wants out. On the Alert, under Technical Information, its blank also. These alerts are not being recorded in the ZA Log either. Keep clicking no, and alert keeps coming back, even when I tell it to remember this answer. Ran AdAware SE and got nothing unusual. Ran Hijack this (latest version), nothing there either. Ran Spybot S&D (Ver 1.3) twice and got an alert about Xabot, and a German error message which follows:
Error during check!: Xabot (Ungültiger Datentyp für '').
An online German/English dictionary tells me the first word means invalid file access mode OR invalid file name OR invalid variable reference. The second word means data type and the third word means to find (found?).
Spybot hangs when I click Fixed Checked.
Running Kapersky Anti-Virus Ver 5.0. That has been running for an hour and a half and seems to be stuck on 31%. UPDATE: After two hours scan is at 67%.
Symantec tells me When W32.Xabot.Worm is executed, it does the following:Copies itself as %System%\wininit32.exe. Can find no instance of this file on my system. Looked around the registry for the changes Symantec talks about and they are not there either.
All this tells me that this Bot hasn't executed yet. Is there some way to get rid of this thing (I'm guessing its loaded in Memory (?) before I reboot or will I have to execute the d**m thing just to be done with it.
I'm behind a router. Will that help in this instance. This thing looks really nasty.
** **
We use our powers for good, not evil
** **
Logic is a systematic method of coming to the wrong
conclusion with confidence.
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|