Support NeoGAF

[BigJonsson]

Something about crss.exe being infected with gaobot virus, it keeps quarantining it but the alert message keeps spamming my screen

the symantec removal tool does shit all

WTF

 

[bionic77]

Something about crss.exe being infected with gaobot virus, it keeps quarantining it but the alert message keeps spamming my screen

the symantec removal tool does shit all

WTF

Same thing happened to me. My laptop got infected at school. In the end I had to resintall everything to get rid of it.

 

[bogg]

Nortownd.

 

[BigJonsson]

My computer is running perfectly fine though

I don't get this

 

[bionic77]

My computer is running perfectly fine though

I don't get this

Mine was too, but I didn't know what the virus did exactly so I spent 2 hours reinstalling everything.

 

[impirius]

If you've removed it to the point that you can access this site (as gaobot normally disables access to certain antivirus sites), diable Norton auto-protect and go to:

http://housecall.trendmicro.com/

If I remember correctly, Housecall will get rid of it.

 

[speshylives]

The woman brought this home from class the other day. Not terribly hard to clean.

Norton and Mcafee have tools to get rid of it (Mcafee's is Stinger, Norton's slips my mind.) Just make sure to clear out your host file as it redirects everything to localhost. Once Stinger/Norton's tool kills it all off, you may have to go in to regedit and kill all the strange keys that popped up under Run and RunServices. I cleaned it before running stinger, so I had to kill the services, manually delete them from windows\system32 and then clean the registry. The registry will close in 2/3 seconds automatically if the infected service is still going.

 

[Mashing]

go into your services control panel (type servies.msc at the run prompt) and disable the Config (or Configuration) Loader service... reboot your machine, and clean run a full system scan (or download stinger: http://vil.nai.com/vil/averttools.asp)

That should get rid of gaobot.


Edit: I'm not exactly sure if gaobot is the one that puts that in the services control panel... it may not be there... If not, follow the previous posters advice