Home > General > Gedzac.exe


This award winning software will deep scan your registry to identify problems and errors that can cause instability and slowdown. OEM Solutions Trusted by world-leading brands. Note that this file is not malicious. Mobile Control Countless devices, one solution.

All rights reserved. When W32/Gemel-A is first run it drops a message file Torres_Gemelas.TXT in the Windows folder and launches Notepad to display the contents of this file. Any help? 2 answers Last reply Nov 15, 2009 More about israfel worm gedzac labs virus mapOct 8, 2004, 10:59 AM Archived from groups: microsoft.public.windowsxp.perform_maintain (More info?)"Jim" wrote:> Is any body This malware also propagates via email. http://www.inklineglobal.com/processdll/thirdparty-GEDZAC.html

Fast, quick and easy. 100% Risk Free Guaranteed! Server Protection Security optimized for servers. Select the SYSTEM.INI window. Secure Email Gateway Simple protection for a complex problem.

For additional information about this threat, see: Description created:Apr. 13, 2004 11:56:44 AM GMT -0800
Description updated:May. 8, 2004 6:04:31 PM GMT -0800

TECHNICAL DETAILS Size of malware:272,399 Bytes Stores your documents, graphics, and other files." HKLM\Software\Microsoft\Windows\CurrentVersion\RegisteredOrganization\GEDZAC = and HKLM\Software\Microsoft\Windows\CurrentVersion\RegisteredOwner\Kuasanagui = When W32/Gemel-A is run on September 11th a bitmap image is If the current day is 19, it displays the following message: 19/12/2003 - Saludos a Cienciano Campeon 2003 de la Copa Sudamerican If the current day is 11, the malware displays Don't risk it!

Get Pricing The right price every time. Your peace of mind. HKLM\Software\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization = GEDZAC HKLM\Software\Microsoft\Windows NT\CurrentVersion\RegisteredOwner = Kuasanagui HKCU\Software\CLASSES\CLSID\(450D8FBA-AD25-11D0-98A8-0800361B1103) InfoTip = "Tus archivos estan a salvo de GEDZAC? Bad news for spam.

Act Now! This malware also attempts to infect .XLS and .DOC files. Worm Virus is Killing me WARNING: Zone Labs web sites spread virus and spyware! Worm?

Open the System Configuration Editor. English 简体中文 český English Français Deutsch Magyar Italiano 日本語 Polski Español 繁體中文 Legal Privacy Cookie Information 1 of 5 previous next close Articles & News Forum Graphics & Displays CPU Solutions Industries Your industry. These cookies are set when you submit a form, login or interact with the site by doing something that goes beyond clicking on simple links.

By using our site you accept the terms of our Privacy Policy. Virus/worm/something killing PC virus? The problem: Do you find that your PC is acting weirdly lately with frequent message popping up? Under the [windows] section, locate the line(s) that begin with: run = From the same line(s), delete the malware path and file name: %System%\mouse_configurator.win Close the System Configuration Editor and click

Virus/Worm question worm virus Suspected Virus/Worm Causing PC to Power Off My system may have a virus, worm, trojan Possible Virus or worm -- suggestions please!!! Sophos Central Synchronized security management. I need help Virus/worm killed my Windows Is 'svhost.exe' a worm or virus? Get the answer Ask a new question Read More Virus System Recovery Microsoft Worm Windows XP Related Resources My Dell GX620 has a virus/worm and only starts in safe mode.

Ask ! All rights reserved. If it says "GEDZAC LABS" at the head and/or tail ends, delete it.

It also creates the following registry entry: HKEY_LOCAL_MACHINE\Software\GEDZAC LABS Israfel Parent = %Windows%\SYSTEM\hta.vbs The following text strings can be found in the malware body: Israfel Worm - GEDZAC LABS 2003 ****************GEDZAC

More resources Tom's Hardware Around the World Tom's Hardware Around the World Denmark Norway Finland Russia France Turkey Germany UK Italy USA Subscribe to Tom's Hardware Search the site Ok About The said template is automatically triggered whenever the MS Excel application accesses an Excel file. (Note: The Excel startup folder is usually %Windows%\Application Data\Microsoft\Excel\XLSTART) In creating the Excel template, this malware All Rights Reserved Tom's Hardware Guide ™ Ad choices Live Sales Chat Have questions?

Check your data back up/restore resources for any suspicious .vbs files. Removing Autostart Entries from System Files A malware modifies system files so that it automatically executes at every Windows startup. SG UTM The ultimate network security package. GEDZAC.exe might be the culprit here.

Cleaner for MacDuplicate Finder for MacSecurity for Windows 10 UsersInternet Safety @ HomeKids’ Online SafetyResource LibraryMobile Threat InfoAll TopicsMORE IN FOR HOMEOnline StoreDo you need help with your Trend Micro Security It propagates via peer-to-peer file sharing networks by dropping copies of itself in a peer-to-peer shared folders, using interesting file names to entice users to download the files. SophosLabs Behind the scene of our 24/7 security. However, Trend Micro strongly recommends that you update to the latest version in order to get comprehensive protection.

It is important to understand that trying to fix PC problems after they occur is always more difficult and expensive than preventing them in the first place, thus prevention is always These startup entries must be removed before the system can be restarted safely. Using Trend Micro Damage Cleanup Engine and Template is recommended to restore registry modifications made by the malware.