> Spyware Encyclopedia Page 61 > GhostVoice

GhostVoice removal

Spyware GhostVoice Information
Name: GhostVoice Category: RAT Date: 2002-11-14 Author: Caesar Coded in: Visual Basic Dangerous: Yes

GhostVoice is one of RAT spywares.
Finding it on your computer means that your computer is infected with RAT and crucial data could be endangered or even lost.

GhostVoice description by Caesar:

Vendor: ´This is a very small trojan that will do just one task: Speak Like LOM´s Funcfactory but without having the character, just the voice. LOL imagine how much scaryness u can brin to your vics ;) There is the editor that comes with the server & the client, to choose install filenames, reg keys & port. Remember to not put the .exe on the file name. Well its my 1st trojan so i think it got some bugs´ GhostVoice Trojan By Caesar of Nuclear Winter Crew Version 1.02 This is a very small trojan that will do just one task: *Speak* Like LOM´s Funcfactory but without having the character, just the voice. LOL imagine how much scaryness u can bring to your vics ;) There is the editor that comes with the server & the client, to choose install filenames, reg keys, port, password & icq notify. Remember to not put the .exe on the file name, or it´ll became yourfile.exe.exe ;). Well its my 1st trojan so i think it got some bugs, but feel free to msg me thru Trojan Forge Forums (www.trojanforge.net). PS: Dont pack the server before editing or you wont be able to edit it. Nuclear Winter Crew: Caesar2k, SNip, Frosty911, Morpheus, Orion, RaideN, Blacksoulman, Vozzie, Yankee, Pyrator, Brim, M1cr0, Alex-X, hippytyre, Pc Fixed Bug: - Server were closing after some information sending - Objects in the client & server were allocated & overwrited - Now server uses the wsck32.dll (Winsock 2.2 API) not the ocx that not much ppl had on their pcs - 1st installation file wasnt copying & unloading itself causing the original file was like been used by windows :P - The Remove server command wasnt removing the server Added: - Password protect connection - A client back image, it was very ugly without a wall paper lol - ICQ Pager - Will open the port just when the vic is online (Optional) - Both client & server carries necessary any file to work properly(except runtimes) Removed - Version Info (All VB6 Apps got that damn thing) THX to: Zatrix for the edit server code Gobo for the flatstyle module Read101 for the move form module NWC Members for the support Caesar

This RAT is also known as:

•Backdoor Program - named by Panda.
• Backdoor.GhostVoice.100 - named by Kaspersky.
• Backdoor.GhostVoice.102 - named by a.
• Bckdoor.VB.de.
• Backdoor.VB.ds.
• Backdoor/GhostVoice.100!Client - named by Computer Associates.
• Backdoor/VB.de - named by Computer Associates.
• Bck/VB - named by Panda.
• Win32.GhostVoice - named by Computer Associates.

>> Delete GhostVoice automatically - Download Spyware Doctor

GhostVoice Removal Instructions
Kill the following processes client.exe, clientvbp.exe, edit.exe, server.exe, servervbp.exe
Remove the following files client.exe, clientvbp.exe, edit.exe, readme.txt, server.exe, servervbp.exe.

Bookmark GhostVoice page

Previous Spyware: Remove GhostSpy 1.0

Next Spyware: Remove GhostVoice 1.0