Re: worm information

[ravi pina <ravi () cow org>]

On Sat, Apr 10, 2004 at 11:19:19AM -0700, Darrell Greenwood said at one point in time:
> On 04/4/10 at 1:53 PM -0400, Jeff Workman wrote the following : 
>
> > http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.um.htm
>
> File Not Found... 'l' missing from end of 'htm'.
>
> http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.um.html

this is correct.  my organization has been infected with this
and it is a particular nasty little bugger.  we may have been
'patient 0' in terms of sending copies of the virus to symantec
so they could write signatures for it.  infected hosts flood
the network with a tremendous amount of data and port opening.

i at least manged to quarantine off all my vpn devices which
seemed to be the entry point.

-r