Win32:Gaobot-342 [Wrm]

Viruses and worms
1

Avast gave me an infection in Red Hat CD 1 Iso file
exactly in:

G:\RedHat\RPMS\rpm-4.2-0.69.i386.rpm

with the virus:
Win32:Gaobot-342 [Wrm]
???
it look to be a false alarm
Any idea?

2

Hi,

scan the file with Trend & KAV below (pause avast shield for this);
if they don’t confirm it, please either

  • send in the file to
    virus@avast.com
  • exclude it from scanning both in mainscanner & avast shield(s)
  • if it’s to large for sending in: send in a link to this topic… best with direct download-link
3

To permenantly delete this, you need to first disable windows XP system restore, because gaobot will get in there and hide. You’ll think you’ve removed it, but when the system refreshes itself a few days later it will restore gaobot. Go to the start button, right-click on “My Computer” and select “Preferences”. Go to “System Restrore” and uncheck the box in the upper left-hand corner. Then run your scan. You can recheck that 3 or 4 days later.