Iraq_oil

Discussion in 'malware problems & news' started by Unzy, Jan 20, 2003.

Thread Status:
Not open for further replies.
  1. Unzy

    Unzy Guest

    Hello all,

    I was wondering if someone has any REMOVAL instructions for the W32.HLLW.Lioten virus (im not sure if its categorised as virus or trojan, so sorry if i put it in the wrong forum) which creates IRAQ_OIL.exe.


    Thnx so much for your input.
     
    Unzy, Jan 20, 2003
    #1
  2. NetWatchman

    NetWatchman Security Expert

    Joined:
    Jul 24, 2002
    Posts:
    31
    I don't have removal instructions but this decribes the worm and most importantly how to close the security hole that IO uses:

    http://www.mynetwatchman.com/kb/security/articles/iraqiworm/
     
    NetWatchman, Jan 21, 2003
    #2
  3. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Thanks Lawrence ;).

    Unzy,

    Have a look at this thread.

    regards.

    paul
     
    Paul Wilders, Jan 21, 2003
    #3
  4. Unzy

    Unzy Guest

    Hey thnx for the support !

    Did the online scan and it deleted most entries, except for this one :

    c:\WINNT\system32\sus\explorer.exe

    It was in use

    Is this related to that virus as well?

    thnx so much
     
    Unzy, Jan 21, 2003
    #4
  5. john2g

    john2g Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    207
    Location:
    UK
    john2g, Jan 22, 2003
    #5
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...