jcg4lpy Posted November 10, 2004 Report Share Posted November 10, 2004 Hi Peter, I have just downloaded the latest update of FSUIPC in order to make the update of FS9 work. During the dowload my virus protection detected a worm, W32.HLLW.Gaobot.gen. It is contained in a file MSIti64.exe. It has been quarantined and I am trying to delete the file. Many thanks for all of your work. The update of FS9 and FSUIPC are working well. I thought I must warn you though. Best Regards, John C. Link to comment Share on other sites More sharing options...
Pete Dowson Posted November 10, 2004 Report Share Posted November 10, 2004 I have just downloaded the latest update of FSUIPC in order to make the update of FS9 work. During the dowload my virus protection detected a worm, W32.HLLW.Gaobot.gen. It is contained in a file MSIti64.exe. It has been quarantined and I am trying to delete the file. I don't know what you tried to download, but it most certainly isn't FSUIPC. I've never heard of the file MSIti64.exe, sorry. Pete Link to comment Share on other sites More sharing options...
GHD Posted November 11, 2004 Report Share Posted November 11, 2004 The only reference I have seen to MSIti64.exe is on a German forum: http://www.trojaner-board.de Search with Google and translate. George Link to comment Share on other sites More sharing options...
jcg4lpy Posted November 13, 2004 Author Report Share Posted November 13, 2004 Sorry but perhaps I didn't make myself clear. The worm has made a file MSIti64.exe where it is hiding, appearing to be a legitimate Microsoft File. Fortunately my virus detection isolated this file and I quarantined it. The Symantec Removal Tool worked and all is removed, but don't forget System Restore, if running XP, or you will reinstall it if System Restore is used. Just warning to all, John C. Link to comment Share on other sites More sharing options...
Pete Dowson Posted November 13, 2004 Report Share Posted November 13, 2004 Sorry but perhaps I didn't make myself clear.Just warning to all Thank you, but again I assure you it was not acquired from the FSUIPC.ZIP file on the http://www.schiratti.com/dowson page! I have downloaded that myself and checked it against my perfectly clean copy. I think you are mis-attributing the source of this worm you obtained. I do not think it is good to frighten folks here from using the latest version of FSUIPC, installed from a perfectly good and checked download. Regards, Pete Link to comment Share on other sites More sharing options...
ronzie Posted November 14, 2004 Report Share Posted November 14, 2004 I downloaded FSUIPC3411 from schirrati and I also have Norton AV updated two days ago. A full system scan yesterday showed no problems indicating no worms were placed by FSUIPC411. The poster must have picked it up elsewhere. Clean as usual. Link to comment Share on other sites More sharing options...
Schunken Posted November 14, 2004 Report Share Posted November 14, 2004 Hello! A Worm isnt necesarry connect or inbedded in a special file.... Only be online in internet without a firewall can infect your system.... When I go online with no firewall it only take 30 seconds and the worm "MS Blaster" is on my sytem.... I think the worm you get find a open port in your internet connection and sneak in... and this would happen also without download anything.... Today you need a anti-Virus AND a firewall to be relative safe.... Grüsse! Andreas Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now