Published Oct 07, 2011|Updated Dec 04, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: No associated aliases

Microsoft security software detects and removes this threat.

Worm:Win32/Gamarue is a family of worms that belong to the Win32/Gamarue family. The Gamarue family may be distributed by exploit kits, spammed emails or other malware, and has been observed downloading other files and stealing information about your computer.

Worm variants of the Win32/Gamarue family may spread by infecting removable drives (such as USB drives or portable hard disks) that you have plugged into your computer. If you then plug those drives into another computer, the worm will infect that computer as well.

See our infographic to for a depiction of how a worm spreads by removable drives.

For more information on this family, see the Win32/Gamarue description.

On November 29, 2017, law enforcement agencies, in cooperation with Microsoft Digital Crimes Unit and with help from Windows Defender researchers, disrupted the Gamarue (also known as Andromeda). For more information:

Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)


Latest news