Remove Gaban Bus. Description and removal instructions

 
Title: Gaban Bus

Type: Remote Administration Tools
Severity scale:Gaban Bus severity is 70  (70 / 100)
 
This is a very dangerous RAT program, designed for stealing all sorts
of passwords, including dial-up passwords with ISP phone numbers and
ICQ99a/b passwords, passwords from edit boxes. The author of this pest
is E. Ramesh. Variants of this pest appeared from December 1998 to
December 2001. Note: this pest has auto-update feature, so the PC is
allways infected with the latest version.

From the publisher:

"Sends information about system Work on Windows 95/98/2000/NT Sends
passwords to your E-mail Anti-viruses dont know it exists yet =) The
Size is 45kb Get dial-up passwords with ISP Phone numbers Get passwords
from Icq99a/Icq99b ( If you have any information about crypting
passwords in icq98a and/or icq2000 please E-mail us) Get passwords from
edit boxes Auto Send mails every X days Auto-update, so victim always
have the newest version =) Attachs to any file (including documents)
Deletes itself from infected file"


Gaban Bus properties:
• Allows remote user connection
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Gaban Bus removal:

remover for Gaban Bus

Gaban Bus manual removal:

Kill processes:
config.exe, gabanbus.exe, gip110doc.exe, gip110exe.exe, gip110jpg.exe, gip110zip.exe, gip112srv.exe, gip113doc.exe, gip113jpg.exe, gipwizard.exe
Unregister DLLs:
hksdll.dll

Delete files:
config.exe, config.ini, config.txt, gabanbus.exe, gip110doc.exe, gip110exe.exe, gip110jpg.exe, gip110zip.exe, gip112srv.exe, gip113doc.exe, gip113jpg.exe, gipwizard.exe, help.txt, hksdll.dll, readme.eng, readme.rus, readme.txt

Other programs to remove Gaban Bus:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 26/03/05
Information updated: 26/03/05

Additional resources related to Gaban Bus:

Attention: If you know or you have a website or page about Gaban Bus removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Gaban Bus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: