Home / malware

PDF

Worm:Win32/Gamarue.N

First posted on 01 March 2013.
Source: Microsoft

Aliases :

There are no other names known for Worm:Win32/Gamarue.N.

Explanation :

When executed, Worm:Win32/Gamarue.N checks for the following file on your computer:

desktop.ini

If present on your computer, the malware reads data from the file and executes it as code. This action is performed as part of the spreading mechanism on removable drives used by Worm:Win32/Gamarue.N.

The file "desktop.ini" may be detected as Worm:Win32/Gamarue.O.

For more information about the Worm:Win32/Gamarue family, see the description elsewhere in the encyclopedia.



Analysis by Ray Roberts

Last update 01 March 2013

 

TOP