Microsoft security software detects and removes this threat.

This threat is a shortcut file created by variants of Worm:Win32/Gamarue. This malware family can steal information about your PC and download other malware.

What to do now

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

It's likely you have also been infected with a Worm:Win32/Gamarue variant. As such, a malicious hacker might have tried to steal your users names and passwords, and other sensitive information. If you think your information has been stolen, see:

You should also change your passwords after you've removed this threat:

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

Worm:Win32/Gamarue.gen!lnk is part of the spreading mechanism used by Worm:Win32/Gamarue, and is usually found on removable drives. The shortcut is used to invoke a Worm:Win32/Gamarue component, which might be detected as Worm:Win32/Gamarue.N.

This means, if you click the shortcut, a worm, detected as Worm:Win32/Gamarue.N, will run.

Go to the family description for the Worm:Win32/Gamarue family for more information.

Analysis by Ray Roberts


Alerts from your security software may be the only symptom.


Alert level: Severe
First detected by definition: 1.143.2119.0
Latest detected by definition: 1.155.2365.0 and higher
First detected on: Feb 12, 2013
This entry was first published on: Feb 12, 2013
This entry was updated on: May 12, 2014

This threat is also detected as:
No known aliases