Ganda Removal Tool
This is a useful utility for cleaning the Ganda virus
Ganda Removal Tool is a small but effective application that targets the Win32.Ganda.A@mm malware. Once run, it creates two copies of itself in Windows folder: SCANDISK.EXE and another randomly named file (ex: "xjvhtbxt.EXE").
Ganda Removal Tool full details
| File Size: | 31 kB |
|---|---|
| License: | Freeware |
| Price: | FREE |
| Released: | 2010-08-02 |
| Downloads: | Total: 652 | This Month: 1 |
| Publisher: | Bitdefender |
| Publisher URL: | http://www.bitdefender.com |
Download Ganda Removal Tool
Save Ganda Removal Tool to My Stuff
Ganda Removal Tool - Windows 7 Download awards
Ganda Removal Tool full description
Ganda Removal Tool is a small but effective application that targets the Win32.Ganda.A@mm malware. Once run, it creates two copies of itself in Windows folder: SCANDISK.EXE and another randomly named file (ex: "xjvhtbxt.EXE").
Creates a mutex "SWEDENSUX" in order to allow only one copy of itself in memory.
It attempts to shut down processes with names as "virus","firewall","f-secure","symantec","mcafee","pc-cillin","trend micro","kaspersky","sophos","norton".
It infects executable files by searching for *.exe, *.scr and *.lnk files in %windir%DESKTOP and %windir%START MENU If a .lnk file is found, it retrieves the executable path and name contained within the .lnk file, then opens the file (if it founds a .exe or a .scr file, it opens them directly) and adds a stub to the end of the executable file, then hijacks one of the functions ExitProcess, GetProcAddress, GetModuleHandleA, LoadLibraryA to point to the stub. The stub loads and executes the file with random name in Windows folder (ex: "xjvhtbxt.EXE").
It creates registry key
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindows CurrentVersionRun"ScanDisk"="C:WINDOWSSCANDISK.exe"]
It looks in [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] and
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices] and attempts to modify the files pointed by the keys, and render them unusable.
It harvests e-mails searching for files matching "*.eml","*.htm*","*.dbx" and Windows Address Book. It also contains some hardcoded e-mails.
Creates a mutex "SWEDENSUX" in order to allow only one copy of itself in memory.
It attempts to shut down processes with names as "virus","firewall","f-secure","symantec","mcafee","pc-cillin","trend micro","kaspersky","sophos","norton".
It infects executable files by searching for *.exe, *.scr and *.lnk files in %windir%DESKTOP and %windir%START MENU If a .lnk file is found, it retrieves the executable path and name contained within the .lnk file, then opens the file (if it founds a .exe or a .scr file, it opens them directly) and adds a stub to the end of the executable file, then hijacks one of the functions ExitProcess, GetProcAddress, GetModuleHandleA, LoadLibraryA to point to the stub. The stub loads and executes the file with random name in Windows folder (ex: "xjvhtbxt.EXE").
It creates registry key
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindows CurrentVersionRun"ScanDisk"="C:WINDOWSSCANDISK.exe"]
It looks in [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] and
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices] and attempts to modify the files pointed by the keys, and render them unusable.
It harvests e-mails searching for files matching "*.eml","*.htm*","*.dbx" and Windows Address Book. It also contains some hardcoded e-mails.
Ganda Removal Tool download tags
Ganda Removal Tool for Windows 7 - Copyright information
All Ganda Removal Tool reviews, submitted ratings and written comments become the sole property of Windows 7 download. You acknowledge that you, not windows7download, are responsible for the contents of your submission. However, windows7download reserves the right to remove or refuse to post any submission for any reason.
Windows 7 Download periodically updates pricing and software information of Ganda Removal Tool full version from the publisher, but some information may be out-of-date. You should confirm all information.
Using warez version, crack, warez passwords, patches, serial numbers, registration codes, key generator, pirate key, keymaker or keygen for Ganda Removal Tool license key is illegal and prevent future development of Ganda Removal Tool. Download links are directly from our mirrors or publisher's website, Ganda Removal Tool torrent or shared files from free file sharing and free upload services, including Rapidshare, MegaUpload, YouSendIt, SendSpace, DepositFiles, DivShare, HellShare, HotFile, FileServe or MediaFire, are not used.
Windows 7 Download periodically updates pricing and software information of Ganda Removal Tool full version from the publisher, but some information may be out-of-date. You should confirm all information.
Using warez version, crack, warez passwords, patches, serial numbers, registration codes, key generator, pirate key, keymaker or keygen for Ganda Removal Tool license key is illegal and prevent future development of Ganda Removal Tool. Download links are directly from our mirrors or publisher's website, Ganda Removal Tool torrent or shared files from free file sharing and free upload services, including Rapidshare, MegaUpload, YouSendIt, SendSpace, DepositFiles, DivShare, HellShare, HotFile, FileServe or MediaFire, are not used.
Post Ganda Removal Tool review
Windows 7 Ganda Removal Tool related downloads
Brief Description This tool checks your computer for infection by specific, prevalent ... Microsoft will release an updated version of this tool on the second Tuesday of each month. ...
Valhalla Removal Tool is a lightweight application that was created in ...
Brief Description This tool checks your computer for infection by specific, prevalent ... Microsoft will release an updated version of this tool on the second Tuesday of each month. ...
... by the Gromozon Rootkit please download our standalone removal tool by clicking the link below. It ...
My Account
My Saved Stuff
GameDay Payoff 1.0.0.121
Download Remove
Cross Fire 1080
Download Remove
Cool Barcode Maker 4.0
Download Remove
ContaCam 3.9.9
Download Remove
Free Large Android Icons 2011.2
Download Remove
FlashCapture 3.0.3.1317
Download Remove
Daytrader Companion 1.4.0
Download Remove
Dator 2.7.0
Download Remove
Azureus 4.0.0.4
Download Remove
AVS Video Converter 8.1.2.510
Download Remove
AutoScreenRecorder Pro 3.1.375
Download Remove
AnyToJpeg 3.3
Download Remove
Any DVD Cloner Express 1.2.2
Download Remove
Free YouTube to MP3 Converter 3.10.11
Download Remove
Fix IE Utility 1.0
Download Remove
DDE server plugin 3.7.4.1130
Download Remove
Codice Fiscale 5.1.1
Download Remove
Encode360 2.03
Download Remove
ChemDoodle 2.0.3
Download Remove
BrushO! 1.05
Download Remove
EVVAddressBook 3.0
Download Remove
Evolution 2.28.1-1
Download Remove
ECrawl 2.63
Download Remove
Audio Sound Editor for .NET 2.2.1.0
Download Remove
123FTP-Free 3.9.1
Download Remove
Amphis Customer 3.0
Download Remove
AIMP Classic 3.10 B1040 Beta
Download Remove
ABC Roster 1.5.0
Download Remove
A-one iPod PSP 3GP Video Converter 7.6.3
Download Remove
Acoolsoft PPT to Video Free 3.2.3
Download Remove
Download Remove
Cross Fire 1080
Download Remove
Cool Barcode Maker 4.0
Download Remove
ContaCam 3.9.9
Download Remove
Free Large Android Icons 2011.2
Download Remove
FlashCapture 3.0.3.1317
Download Remove
Daytrader Companion 1.4.0
Download Remove
Dator 2.7.0
Download Remove
Azureus 4.0.0.4
Download Remove
AVS Video Converter 8.1.2.510
Download Remove
AutoScreenRecorder Pro 3.1.375
Download Remove
AnyToJpeg 3.3
Download Remove
Any DVD Cloner Express 1.2.2
Download Remove
Free YouTube to MP3 Converter 3.10.11
Download Remove
Fix IE Utility 1.0
Download Remove
DDE server plugin 3.7.4.1130
Download Remove
Codice Fiscale 5.1.1
Download Remove
Encode360 2.03
Download Remove
ChemDoodle 2.0.3
Download Remove
BrushO! 1.05
Download Remove
EVVAddressBook 3.0
Download Remove
Evolution 2.28.1-1
Download Remove
ECrawl 2.63
Download Remove
Audio Sound Editor for .NET 2.2.1.0
Download Remove
123FTP-Free 3.9.1
Download Remove
Amphis Customer 3.0
Download Remove
AIMP Classic 3.10 B1040 Beta
Download Remove
ABC Roster 1.5.0
Download Remove
A-one iPod PSP 3GP Video Converter 7.6.3
Download Remove
Acoolsoft PPT to Video Free 3.2.3
Download Remove
Would you like to receive announcements of new versions of your software by email or by RSS reader? Register for FREE!
Windows 7 Downloads Picks
- Microsoft Security Essentials 4.0.1526.0
- AVG Free Edition 10 (64 bit) 2011.1392
- Avira AntiVir Personal - Free Antivirus 12.0.0.1125
- TrustPort Antivirus 2012 12.0.0.487
- FortiClient 4.3.3
- COMODO Internet Security (64 bit) 5.10.228257.225
- NOD32 Antivirus (64 bit) 5.2.9.1
- Avira Antivir Virus Definition File Update 7.11.17.06
- NOD32 Antivirus (32 bit) 5.2.9.1
- AVG Free Edition 10 (32 bit) 2011.1392
- SalityKiller 1.3.6.0
- TrustPort Antivirus USB Edition 2012 12.0.0.4872
- McAfee Internet Security 2012
- Symantec Endpoint Protection 12.1.671.4971
- Trend Micro Virus Pattern File 9.159.00
- Net-Worm.Win32.Kido Remover 3.4.14
- BitDefender Free Edition 2009 B12.0.12.0
- Ansav 2.0.53
- TDSSKiller 2.7.38.0
- AVG Free Edition 2012 2012.2178
Popular Tags
scanner
virus scanner
adware
computer security
protection
antivirus software
antivirus
rootkit
scan
malware
virus
worms
virus protection
free antivirus
antispam
security
anti-virus
software
internet security
antispyware
anti spyware
virus scan
free
trojan
anti virus
spyware
trojans
firewall
remove
worm
Popular Windows 7 Software
- Hotspot Shield 2.53
- WirelessKeyView 1.50
- Cain & Abel 4.9.43
- Deep Freeze 7.30.270.3852
- UltraSurf 11.04
- Microsoft Security Essentials 4.0.1526.0
- Spybot - Search & Destroy 1.6.2
- Facebook Password Decryptor 2.1
- AVG Free Edition 10 (64 bit) 2011.1392
- Free Hide IP 3.8.0.2
- Easy Drive Lock 4.2
- Easy File Locker 1.3
- Revealer Keylogger Free Edition 1.4
- Index.dat Analyzer 2.5
- Malwarebytes Anti-Malware 1.61.0.1400
© 2012 Windows7Download.com - All logos, trademarks, art and other creative works are and remain copyright and property of their respective owners. Microsoft Windows is a registered trademarks of Microsoft Corporation. Microsoft Corporation in no way endorses or is affiliated with windows7download.com.






