| Gaban Bus removal| Spyware Gaban Bus Information |
|---|
Name: Gaban Bus
Category: RAT
Author: E. Ramesh
Dangerous: Yes |
Gaban Bus is one of RAT spywares.
Forwards system info, passwords [including dial-up passwords with ISP phone numbers & ICQ99a/b passwords, passwords from edit boxes] through email. Includes auto-update, so victim always has the recent version. Finding it on your computer means that your computer is infected with RAT and crucial data could be endangered or even lost.
Gaban Bus description by E. Ramesh: Vendor: ´ Forwards data about system Work on Windows 95/98/2000/NT Forwards passwords to your E-mail Anti-viruses dont know it exists yet =) The Size is 45kb Get dial-up passwords with ISP Phone numbers Get passwords from Icq99a/Icq99b ( If you´ve any data about crypting passwords in icq98a and/or icq2000 please E-mail us) Get passwords from edit boxes Auto Send mails every X days Auto-update, so victim always have the newest version =) Attachs to files (including documents) Deletes itself from infected file´
This RAT is also known as: •Gip.
>> Delete Gaban Bus automatically - Download Spyware Doctor
| Gaban Bus Removal Instructions |
|---|
Kill the following processes -1023838180.exe, config.exe, gabanbus.exe, gip110doc.exe, gip110exe.exe, gip110jpg.exe, gip110zip.exe, gip112srv.exe, gip113doc.exe, gip113jpg.exe, gipwizard.exe | Unregister the following DLLs and reboot hksdll.dll.
| Remove the following files -1023838180.exe, config.exe, config.ini, config.txt, gabanbus.exe, gip110doc.exe, gip110exe.exe, gip110jpg.exe, gip110zip.exe, gip112srv.exe, gip113doc.exe, gip113jpg.exe, gipwizard.exe, help.txt, hksdll.dll, readme.eng, readme.rus, readme.txt.
|
Bookmark Gaban Bus page
|