Iraq_oil

Discussion in 'malware problems & news' started by Unzy, Jan 20, 2003.

Thread Status:
Not open for further replies.
  1. Unzy

    Unzy Guest

    Hello all,

    I was wondering if someone has any REMOVAL instructions for the W32.HLLW.Lioten virus (im not sure if its categorised as virus or trojan, so sorry if i put it in the wrong forum) which creates IRAQ_OIL.exe.


    Thnx so much for your input.
     
  2. NetWatchman

    NetWatchman Security Expert

    Joined:
    Jul 24, 2002
    Posts:
    31
    I don't have removal instructions but this decribes the worm and most importantly how to close the security hole that IO uses:

    http://www.mynetwatchman.com/kb/security/articles/iraqiworm/
     
  3. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Thanks Lawrence ;).

    Unzy,

    Have a look at this thread.

    regards.

    paul
     
  4. Unzy

    Unzy Guest

    Hey thnx for the support !

    Did the online scan and it deleted most entries, except for this one :

    c:\WINNT\system32\sus\explorer.exe

    It was in use

    Is this related to that virus as well?

    thnx so much
     
  5. john2g

    john2g Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    207
    Location:
    UK
Thread Status:
Not open for further replies.