Win7 Download
bookmark Windows 7 Download add as favorite Windows 7 Download Windows 7 Download RSS register at Windows 7 Download

Ganda Removal Tool for Windows 7 - Utility for cleaning the Ganda virus - Windows 7 Download

Ganda Removal Tool Windows 7

Ganda Removal Tool

This is a useful utility for cleaning the Ganda virus

Ganda Removal Tool is a small but effective application that targets the Win32.Ganda.A@mm malware. Once run, it creates two copies of itself in Windows folder: SCANDISK.EXE and another randomly named file (ex: "xjvhtbxt.EXE").

Ganda Removal Tool full details

File Size: 31 kB
License: Freeware
Price: FREE
Released: 2010-08-02
Downloads: Total: 652 | This Month: 1
Publisher: Bitdefender
Publisher URL: http://www.bitdefender.com


Download Ganda Removal Tool

Save Ganda Removal Tool to My Stuff

View full Ganda Removal Tool screenshot
Ganda Removal Tool

User Rating: 0 (0 votes)

Ganda Removal Tool - Windows 7 Download awards

Ganda Removal Tool windows 7 compatible windows 7 download editor's pick

Ganda Removal Tool full description

Ganda Removal Tool is a small but effective application that targets the Win32.Ganda.A@mm malware. Once run, it creates two copies of itself in Windows folder: SCANDISK.EXE and another randomly named file (ex: "xjvhtbxt.EXE").

Creates a mutex "SWEDENSUX" in order to allow only one copy of itself in memory.
It attempts to shut down processes with names as "virus","firewall","f-secure","symantec","mcafee","pc-cillin","trend micro","kaspersky","sophos","norton".
It infects executable files by searching for *.exe, *.scr and *.lnk files in %windir%DESKTOP and %windir%START MENU If a .lnk file is found, it retrieves the executable path and name contained within the .lnk file, then opens the file (if it founds a .exe or a .scr file, it opens them directly) and adds a stub to the end of the executable file, then hijacks one of the functions ExitProcess, GetProcAddress, GetModuleHandleA, LoadLibraryA to point to the stub. The stub loads and executes the file with random name in Windows folder (ex: "xjvhtbxt.EXE").

It creates registry key
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindows CurrentVersionRun"ScanDisk"="C:WINDOWSSCANDISK.exe"]

It looks in [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] and
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices] and attempts to modify the files pointed by the keys, and render them unusable.

It harvests e-mails searching for files matching "*.eml","*.htm*","*.dbx" and Windows Address Book. It also contains some hardcoded e-mails.

Ganda Removal Tool download tags

Windows 7 free download

Bookmark Ganda Removal Tool

copy windows 7 bookmark
copy windows 7 bookmark
copy windows 7 bookmark

Ganda Removal Tool for Windows 7 - Copyright information

All Ganda Removal Tool reviews, submitted ratings and written comments become the sole property of Windows 7 download. You acknowledge that you, not windows7download, are responsible for the contents of your submission. However, windows7download reserves the right to remove or refuse to post any submission for any reason.

Windows 7 Download periodically updates pricing and software information of Ganda Removal Tool full version from the publisher, but some information may be out-of-date. You should confirm all information.
Using warez version, crack, warez passwords, patches, serial numbers, registration codes, key generator, pirate key, keymaker or keygen for Ganda Removal Tool license key is illegal and prevent future development of Ganda Removal Tool. Download links are directly from our mirrors or publisher's website, Ganda Removal Tool torrent or shared files from free file sharing and free upload services, including Rapidshare, MegaUpload, YouSendIt, SendSpace, DepositFiles, DivShare, HellShare, HotFile, FileServe or MediaFire, are not used.

Post Ganda Removal Tool review

Your Name:
Product Version:
Rating:
Review:
Security Code:

Windows 7 Ganda Removal Tool related downloads

Brief Description This tool checks your computer for infection by specific, prevalent ... Microsoft will release an updated version of this tool on the second Tuesday of each month. ...
Valhalla Removal Tool is a lightweight application that was created in ...
Jeefo Removal Tool is a lightweight utility that can help you ...
Brief Description This tool checks your computer for infection by specific, prevalent ... Microsoft will release an updated version of this tool on the second Tuesday of each month. ...
... by the Gromozon Rootkit please download our standalone removal tool by clicking the link below. It ...
My Account
My Saved Stuff
Windows 7 Downloads Picks
Popular Tags
Popular Windows 7 Software
© 2012 Windows7Download.com - All logos, trademarks, art and other creative works are and remain copyright and property of their respective owners. Microsoft Windows is a registered trademarks of Microsoft Corporation. Microsoft Corporation in no way endorses or is affiliated with windows7download.com.