Remove Gudeb. Description and removal instructions

 
Title: Gudeb

Type: Worms
Severity scale:Gudeb severity is 46  (46 / 100)
 
Gudeb is a worm that spreads to FTP servers, which valid account login names and passwords it has. Once executed, the parasite displays a certain message with the "Read this!" title and installs itself to the system. First of all it tries to disable few installed security-related programs. Then it begins searching for the Total Commander configuration file, which may contain login details of valid FTP accounts. If Gudeb finds such a file, it attempts to connect to remote servers and upload infected files there. On a specific date the worm hides some directories residing on several local hard drives. Gudeb automatically runs on every Windows startup.


Gudeb properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Gudeb removal:

remover for Gudeb

Gudeb manual removal:

Kill processes:
win32debug.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\win32debug
Delete files:
win32debug.exe
Misc:
The win32debug.exe file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Other programs to remove Gudeb:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 02/12/05
Information updated: 02/12/05

Additional resources related to Gudeb:

Attention: If you know or you have a website or page about Gudeb removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Gudeb parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: