W32.Ganbate.A is a worm that spreads through removable storage devices. It may also attempt to disable certain system utilities.

Category: Worm

Risk Level: Low

Symptoms: It displays the message when executed:

  • Title: IOIMALL(G)
  • Message: This is Histoty of JMTi…!!!~

Related Files and Process:

  • %System%\HistoryJMTi.exe
  • %Windir%\Help\HistoryJMTi.exe
  • %Windir%\security\Database\regedit.exe
  • %Windir%\security\Database\msagent.exe
  • %SystemDrive%\HistoryJMTi.exe

View Complete Information and Removal: W32.Ganbate.A

View and Share Removal Procedure Below

Source: Symantec