Win32/Gamarue

Win32/Gamarue is a malware infection that may propagate via exploit kits such as Blacole, other malware infections, for example, Win32/Dofoil and Win32/Beebone and spammed emails (the subject 'Your ex sent me this pciture [sic] of you.' and an attachment named 'Photo.zip'). Win32/Gamarue can steal sensitive information from the affected users. When Win32/Gamarue is executed, it creates a new instance of one of the certain files, and adds its payload into the new process. If Win32/Gamarue runs with administrator privileges, it may copy itself to the particular folders by creating the specific files. Win32/Gamarue may create some registry entries so that it can start whenever you boot up Windows.