Worm.Gamarue.I
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 20,641 |
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 1,146 |
| First Seen: | July 20, 2012 |
| Last Seen: | September 15, 2026 |
| OS(es) Affected: | Windows |
The detection of Worm.Gamarue.I on your system indicates a potential security threat that requires immediate attention. This worm, like many others, is designed to replicate itself and spread to other computers, potentially causing harm to your data and system integrity. Understanding what this threat is, how it operates, and the symptoms it may cause is crucial in taking the necessary steps to remove it and protect your computer.
Table of Contents
What Is Worm.Gamarue.I?
Worm.Gamarue.I is identified as a type of worm, which is a self-replicating malware that can spread from system to system without the need for human interaction. Worms can exploit vulnerabilities in operating systems or applications to infect computers. The name Worm.Gamarue.I itself suggests it is part of a broader category of malware known as Gamarue, but specific details about its origins, behavior, and impact can vary. It's essential to approach the removal with a comprehensive strategy to ensure all components of the worm are eliminated.
How Worm.Gamarue.I Operates
Worms like Worm.Gamarue.I typically operate by exploiting system vulnerabilities or using social engineering tactics to infect a computer. Once inside, they can spread through network connections, email attachments, or infected software downloads. These worms can also modify system settings, create backdoors for remote access, and even install additional malware. Their ability to self-replicate means they can quickly spread across a network, making timely removal critical to prevent further damage.
Symptoms of Infection
The symptoms of a Worm.Gamarue.I infection can vary but may include slow system performance, frequent crashes, or unusual network activity. You might also notice unfamiliar programs or toolbars installed on your browser, changes to your homepage, or an increase in pop-up ads. In some cases, the worm may attempt to disable security software or block access to certain websites, further complicating removal efforts. Being aware of these symptoms can help in identifying the infection early on.
How to Remove Worm.Gamarue.I
- Start your computer in Safe Mode with Networking. This will limit the worm's ability to spread or cause damage during the removal process.
- Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter. Ensure the tool is updated with the latest definitions to improve the chances of detecting and removing the worm.
- Uninstall any suspicious programs that you do not recognize or that were installed around the time the infection was detected. Be cautious and only remove programs you are certain are not needed.
- Reset your web browsers (Chrome, Firefox, Edge) to their default settings. This can help remove any malicious extensions or changes made by the worm.
- Reboot your computer and perform another full scan with your anti-malware tool to ensure all components of the worm have been removed. Repeat this process if any remnants are found.
Conclusion
Removing Worm.Gamarue.I requires a systematic approach to ensure all traces of the worm are eliminated from your system. By understanding the nature of this threat and following the removal steps outlined, you can protect your computer and data from further harm. It's also crucial to maintain good security practices, such as regularly updating your operating system and software, using strong antivirus protection, and being cautious with email attachments and downloads, to prevent future infections.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| Fortinet | W32/Jorik_Steckt.BC!tr |
| AntiVir | Worm/Gamarue.I.355 |
| Kaspersky | Trojan.Win32.Jorik.Steckt.bc |
| ClamAV | Win.Trojan.Agent-20637 |
| CAT-QuickHeal | Trojan.Jorik.Steckt.bc |
| AVG | PSW.Generic9.CHWU |
| Kaspersky | Trojan-Spy.Win32.Zbot.dvat |
| NOD32 | a variant of Win32/Kryptik.AFTN |
| AVG | Downloader.Generic13.ARYK |
| McAfee-GW-Edition | Artemis!D3818E53F934 |
| Kaspersky | Trojan-Downloader.Win32.Andromeda.unq |
| McAfee | BackDoor-FJW!D3818E53F934 |
| AVG | Crypt.BTIP |
| Ikarus | Trojan.Win32.Viknok |
| AntiVir | TR/Rogue.949234 |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | msbuiri.com | 2f7df37dd98d2cb8b0182cd2c99e8a5a | 29 |
| 2. | dxiomuv.exe | f1afb7c0a8c8d5d1fe39d901d9e95e79 | 6 |
| 3. | svshost.exe | 33066b25e99516dd3c12f97fcc11b6c7 | 2 |
| 4. | dxosceyo.exe | b507aab4b5256b068efc52013cf85585 | 2 |
| 5. | dxwoec.exe | f9d96815a863a36f8831a6593992b06e | 2 |
| 6. | dxptzl.exe | b4db2fd12f53214d7a5c554567d21b54 | 2 |
| 7. | dxeqvhcdg.exe | 1cc42b371e3aafac62dea9a816519a9c | 2 |
| 8. | mswuttck.cmd | d3818e53f9345b274f862108215da3bd | 2 |
| 9. | dxabdv.exe | 09fe7b078e2f2f201fa9f627bcfb88ba | 2 |
| 10. | msqezvlu.com | d9984c9a1eb5deca2d6cd69036d86b95 | 2 |
| 11. | msibcuvqj.pif | 7a1d65b4da6c84e8b174d0589cff8f64 | 1 |
| 12. | msiaya.exe | 5a62ef0ab5b3e1ea1295752b4d71bb40 | 1 |
| 13. | msqfkevyf.pif | 5e6089e20254b1cd080a6c0d27018392 | 1 |
| 14. | msbuofq.com | a03bd614c35cd1777605e22f04369c14 | 1 |
| 15. | msavcu.exe | a6f0115d2902a857a7d5b8604075dabb | 1 |
| 16. | msaiaya.scr | ea999ad0155437cefaa39745adf48a46 | 1 |
| 17. | mssiulia.cmd | 77591ef66f98d6c7db7892b81b131530 | 1 |
| 18. | msioociqa.exe | c49a3c2b364927c6e510e9bf4468b343 | 1 |
| 19. | mspexf.com | 1f1d17417c03f8828b0ec4731e179ff8 | 1 |
| 20. | msfhqty.com | 9cdd85fc136c661e51ec599515f88ed7 | 1 |
| 21. | msqnykae.com | fd6e307d7fbfcea3d05b687b9ecf9ec7 | 1 |
| 22. | msiobqso.scr | 919cc13048d501a598a2014d4002ad1e | 1 |
| 23. | msuffvua.scr | 28c0d8e39407aac2c444a5679eebb577 | 1 |
| 24. | dxujlo.exe | 936daa7dc3591d7d8d56e9fb29043c3b | 1 |
| 25. | ccoxuszy.com | 4c0a1cdb322291e292f4f138371c9649 | 1 |
| 26. | dxcbxw.exe | d5d0d1a02d95025737c45004eb3d93d9 | 1 |
| 27. | msfauh.cmd | c6dc1ba5740265b0bd2df97cce0a5cb2 | 1 |
| 28. | mszuatizo.exe | 62c6e831efd04e3b61b30f7bb0a7801b | 1 |