Worm:Win32/Gamarue.gen!lnk
Windows Defender detects and removes this threat.
This threat is a shortcut file created by variants of Worm:Win32/Gamarue. This malware family can steal information about your PC and download other malware.
MSIL/Gamarue
Microsoft security software detects and removes this threat.
This malware family can give a malicious hacker control of your PC. The malware can also steal your sensitive information and change your PC security settings.
The Win32/Gamarue family description has more information.
Win32/Gamarue
Microsoft Defender Antivirus detects and removes this threat.
This malware family can give a malicious hacker control of your PC. The malware can also steal your sensitive information and change your PC security settings.
We've seen them installed by exploit kits and other malware. They can also be attached to spam emails.
Some variants of this family are worms and can spread by infecting removable drives (such as USB flash drives or portable hard disks). If you plug those drives into another PC, the worm will infect that PC as well. See Worm:Win32/Gamarue for more information.
On November 29, 2017, law enforcement agencies, in cooperation with Microsoft Digital Crimes Unit and with help from Windows Defender researchers, disrupted the Gamarue (also known as Andromeda). For more information:
Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)
Worm:Win32/Gamarue.AR
Windows Defender detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also be attached to spam emails, or arrive via an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
Worm:Win32/Gamarue.AU
Microsoft security software detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also spread through spam email attachments, or installed through an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
Backdoor:Win32/Gamarue
Microsoft Defender Antivirus detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also be attached to spam emails, or arrive via an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
On November 29, 2017, law enforcement agencies, in cooperation with Microsoft Digital Crimes Unit and with help from Windows Defender researchers, disrupted the Gamarue (also known as Andromeda). For more information:
Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)
TrojanDownloader:MSIL/Gamarue
Microsoft security software detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also be attached to spam emails, or arrive via an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
Worm:Win32/Gamarue.AP
Microsoft security software detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also be attached to spam emails, or get in through an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
Worm:Win32/Gamarue.AQ
Microsoft security software detects and removes this threat.
This threat can give a malicious hacker control of your PC to steal your sensitive information and change your PC security settings.
It can be installed on your PC by an exploit kit or other malware. It can also be attached to spam emails, or gets in through an infected removable drive, such as a USB flash drive.
See the Win32/Gamarue family description for more information.
Worm:Win32/Gamarue.O
Microsoft security software detects and removes this threat.
This threat is the spreading component of the Worm:Win32/Gamarue family of worms.
Worm:Win32/Gamarue.I
Windows Defender detects and removes this threat.
This worm can download files onto your PC.
It can be installed when you open a spam email attachment. It also copies itself to any USB flash drives connected to your PC.
Worm:Win32/Gamarue.AN
Windows Defender detects and removes this threat.
This worm can download files onto your PC.
It can be installed when you open a spam email attachment or downloaded onto your PC by other malware (such as Win32/Dofoil and Win32/Beebone) or from an exploit kit. It also copies itself to any USB flash drives connected to your PC.
Worm:Win32/Gamarue.AO
Windows Defender detects and removes this threat.
This worm can download files onto your PC.
It can be installed when you open a spam email attachment or downloaded onto your PC by other malware (such as Win32/Dofoil and Win32/Beebone) or from an exploit kit. It also copies itself to any USB flash drives connected to your PC.
Behavior:Win32/Gamarue.gen!A
Windows Defender detects and removes this threat.
This generic detection catches suspicious or malware-like behaviors on your PC. Threats detected under this name can be highly variable in terms of behavior and impact.
See the Win32/Gamarue family description for more information.
Worm:Win32/Gamarue.lnk!plock
Windows Defender detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).
Win32/Gamarue.B!plock
Windows Defender detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).
Win32/Gamarue.C!plock
Windows Defender detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).
Worm:Win32/Gamarue.C!plock
Windows Defender detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).
Worm:Win32/Gamarue.B!plock
Microsoft security software detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).
Worm:Win32/Gamarue!rfn
Windows Defender detects and removes this threat.
Worms automatically spread to other PCs. They can do this in a number of ways, including by copying themselves to removable drives, network folders, or spreading via email.
Typically, worms can get on your PC if you visit a compromised website, open an unsafe email attachment, or use an infected removable or network drive (like a USB flash drive).