Follow:

 

Worm:Win32/Gamarue.N


Microsoft security software detects and removes this threat.

Worm:Win32/Gamarue.N is the spreading component of the Worm:Win32/Gamarue family of worms.



What to do now

The following Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Threat behavior

When run, Worm:Win32/Gamarue.N checks if you have the file desktop.ini in your PC.

If you do, this worm reads data from the file and runs it as code. This action is done as part of the spreading mechanism on removable drives used by Worm:Win32/Gamarue.N.

The file desktop.ini might be detected as Worm:Win32/Gamarue.O.

For more information about the Worm:Win32/Gamarue family, see the description elsewhere in the encyclopedia.

Analysis by Ray Roberts


Symptoms

The following could indicate that you have this threat on your PC:

  • You have the file desktop.ini in your PC

Prevention


Alert level: Severe
First detected by definition: 1.143.2119.0
Latest detected by definition: 1.173.2181.0 and higher
First detected on: Feb 12, 2013
This entry was first published on: Feb 12, 2013
This entry was updated on: Oct 09, 2013

This threat is also detected as:
No known aliases