Remove GayOL. Description and removal instructions

Title: GayOL
Type: Remote Administration Tools	Severity scale: (57 / 100)

This RAT was created by a hacker called Officer Dick especially for disturbing the work of AOL users. This virus also includes ICQ notify feature. It means that when the victim's computer is infected, the intruder gets a notify via the ICQ program. This pest was written in Visual Basic. Several variants (GayOL 1.0, GayOL 1.0B, GayOL 1.6) appeared from January 2000 to September 2001.

From the publisher:

"I made this program because a lot of my targets were AOL users, and a lot of the great trojans out there didn't have AOL functions. AOL Admin did, but its not compatible with AOLs new 5.0 software. Also, I talked to the guy and he said that he's not creating anymore AOL Admin versions and it was his last one. Of course this is in beta, a lot of the great functions havn't been added yet...

This beta was intended to be used along with another Trojan (i.e. SubSeven). That's why this server doesn't install itself to any ini files. To remove the server from your computer, just go to your client at 127.0.0.1 and click the menu Miscellaneous>Connection>Remove Server Server. IF you or your target come up with errors when they open the server, they must not have the VB Runtimes installed. To open the client and server, you require the MSVBM60.DLL and the MSWINSCK.OCX files. This is your basic Client/Server trojan. This has a working ICQ notifier, however, you have to hex edit it to change your UIN. Just locate "11111111" in this server program and replace it with your UIN. Next, all you have to do is get your target to run the server program and you're in! This shouldn't be hard, because most AOLers are gullible to believe that AOL is #1 or AOL is the Internet."

FORUM:
Discuss GayOL in
spyware removal forum

GayOL properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic GayOL removal:

remover for GayOL

GayOL manual removal:

Kill processes:
-1415723109.exe, -1711455856.exe, client.exe, edit, server.exe, gaoltray.exe, gayol, client.exe, gayol, server.exe, server.exe

HELP:
how to kill malicious processes

Delete files:
-1415723109.exe, -1711455856.exe, client.exe, edit server.exe, gaoltray.exe, gayol client.exe, gayol server.exe, index.html, read me.txt, readme.txt, server.exe

HELP:
how to remove harmful files

Other programs to remove GayOL:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 27/03/05
Information updated: 27/03/05

Additional resources related to GayOL:

Attention: If you know or you have a website or page about GayOL removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about GayOL parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.