Remove Gangbot. Description and removal instructions

Title: Gangbot
Type: Worms	Severity scale: (61 / 100)

Gangbot is an Internet worm that spreads to remote computers through instant messages, by exploiting known security vulnerabilities and connecting to SQL servers protected by weak passwords. Once executed, the parasite secretly installs itself to the system and runs a payload. It opens a back door providing the attacker with unauthorized remote access to the compromised computer. Gangbot also downloads and executes malicious files, terminates running antiviruses, firewalls, anti-spyware and other security-related programs. Furthermore, it steals user passwords for web sites and FTP servers and account details used in installed instant messaging software. The worm can run hidden web and FTP servers, which can be used to spread the infection. Gangbot runs as a service on every Windows startup.

FORUM:
Discuss Gangbot in
spyware removal forum

Related files: seagatecom.exe

Gangbot properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Gangbot removal:

remover for Gangbot

Gangbot manual removal:

Kill processes:
seagatecom.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Seagate Communication

HELP:
how to remove registry entries

Delete files:
seagatecom.exe

HELP:
how to remove harmful files

Misc:
The seagatecom.exe file can be found in the folder C:\WINDOWS\System32\dllcache.

Other programs to remove Gangbot:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 23/01/07
Information updated: 23/01/07

Additional resources related to Gangbot:

Attention: If you know or you have a website or page about Gangbot removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Gangbot parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.