Threat Database Worms Worm.Gamarue.I

Worm.Gamarue.I

By CagedTech in Worms
Published:
Last updated:

Threat Scorecard

Popularity Rank: 20,641
Threat Level: 50 % (Medium)
Infected Computers: 1,146
First Seen: July 20, 2012
Last Seen: September 15, 2026
OS(es) Affected: Windows

The detection of Worm.Gamarue.I on your system indicates a potential security threat that requires immediate attention. This worm, like many others, is designed to replicate itself and spread to other computers, potentially causing harm to your data and system integrity. Understanding what this threat is, how it operates, and the symptoms it may cause is crucial in taking the necessary steps to remove it and protect your computer.

What Is Worm.Gamarue.I?

Worm.Gamarue.I is identified as a type of worm, which is a self-replicating malware that can spread from system to system without the need for human interaction. Worms can exploit vulnerabilities in operating systems or applications to infect computers. The name Worm.Gamarue.I itself suggests it is part of a broader category of malware known as Gamarue, but specific details about its origins, behavior, and impact can vary. It's essential to approach the removal with a comprehensive strategy to ensure all components of the worm are eliminated.

How Worm.Gamarue.I Operates

Worms like Worm.Gamarue.I typically operate by exploiting system vulnerabilities or using social engineering tactics to infect a computer. Once inside, they can spread through network connections, email attachments, or infected software downloads. These worms can also modify system settings, create backdoors for remote access, and even install additional malware. Their ability to self-replicate means they can quickly spread across a network, making timely removal critical to prevent further damage.

Symptoms of Infection

The symptoms of a Worm.Gamarue.I infection can vary but may include slow system performance, frequent crashes, or unusual network activity. You might also notice unfamiliar programs or toolbars installed on your browser, changes to your homepage, or an increase in pop-up ads. In some cases, the worm may attempt to disable security software or block access to certain websites, further complicating removal efforts. Being aware of these symptoms can help in identifying the infection early on.

How to Remove Worm.Gamarue.I

  1. Start your computer in Safe Mode with Networking. This will limit the worm's ability to spread or cause damage during the removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter. Ensure the tool is updated with the latest definitions to improve the chances of detecting and removing the worm.
  3. Uninstall any suspicious programs that you do not recognize or that were installed around the time the infection was detected. Be cautious and only remove programs you are certain are not needed.
  4. Reset your web browsers (Chrome, Firefox, Edge) to their default settings. This can help remove any malicious extensions or changes made by the worm.
  5. Reboot your computer and perform another full scan with your anti-malware tool to ensure all components of the worm have been removed. Repeat this process if any remnants are found.

Conclusion

Removing Worm.Gamarue.I requires a systematic approach to ensure all traces of the worm are eliminated from your system. By understanding the nature of this threat and following the removal steps outlined, you can protect your computer and data from further harm. It's also crucial to maintain good security practices, such as regularly updating your operating system and software, using strong antivirus protection, and being cautious with email attachments and downloads, to prevent future infections.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Fortinet W32/Jorik_Steckt.BC!tr
AntiVir Worm/Gamarue.I.355
Kaspersky Trojan.Win32.Jorik.Steckt.bc
ClamAV Win.Trojan.Agent-20637
CAT-QuickHeal Trojan.Jorik.Steckt.bc
AVG PSW.Generic9.CHWU
Kaspersky Trojan-Spy.Win32.Zbot.dvat
NOD32 a variant of Win32/Kryptik.AFTN
AVG Downloader.Generic13.ARYK
McAfee-GW-Edition Artemis!D3818E53F934
Kaspersky Trojan-Downloader.Win32.Andromeda.unq
McAfee BackDoor-FJW!D3818E53F934
AVG Crypt.BTIP
Ikarus Trojan.Win32.Viknok
AntiVir TR/Rogue.949234

File System Details

Worm.Gamarue.I may create the following file(s):
# File Name MD5 Detections
1. msbuiri.com 2f7df37dd98d2cb8b0182cd2c99e8a5a 29
2. dxiomuv.exe f1afb7c0a8c8d5d1fe39d901d9e95e79 6
3. svshost.exe 33066b25e99516dd3c12f97fcc11b6c7 2
4. dxosceyo.exe b507aab4b5256b068efc52013cf85585 2
5. dxwoec.exe f9d96815a863a36f8831a6593992b06e 2
6. dxptzl.exe b4db2fd12f53214d7a5c554567d21b54 2
7. dxeqvhcdg.exe 1cc42b371e3aafac62dea9a816519a9c 2
8. mswuttck.cmd d3818e53f9345b274f862108215da3bd 2
9. dxabdv.exe 09fe7b078e2f2f201fa9f627bcfb88ba 2
10. msqezvlu.com d9984c9a1eb5deca2d6cd69036d86b95 2
11. msibcuvqj.pif 7a1d65b4da6c84e8b174d0589cff8f64 1
12. msiaya.exe 5a62ef0ab5b3e1ea1295752b4d71bb40 1
13. msqfkevyf.pif 5e6089e20254b1cd080a6c0d27018392 1
14. msbuofq.com a03bd614c35cd1777605e22f04369c14 1
15. msavcu.exe a6f0115d2902a857a7d5b8604075dabb 1
16. msaiaya.scr ea999ad0155437cefaa39745adf48a46 1
17. mssiulia.cmd 77591ef66f98d6c7db7892b81b131530 1
18. msioociqa.exe c49a3c2b364927c6e510e9bf4468b343 1
19. mspexf.com 1f1d17417c03f8828b0ec4731e179ff8 1
20. msfhqty.com 9cdd85fc136c661e51ec599515f88ed7 1
21. msqnykae.com fd6e307d7fbfcea3d05b687b9ecf9ec7 1
22. msiobqso.scr 919cc13048d501a598a2014d4002ad1e 1
23. msuffvua.scr 28c0d8e39407aac2c444a5679eebb577 1
24. dxujlo.exe 936daa7dc3591d7d8d56e9fb29043c3b 1
25. ccoxuszy.com 4c0a1cdb322291e292f4f138371c9649 1
26. dxcbxw.exe d5d0d1a02d95025737c45004eb3d93d9 1
27. msfauh.cmd c6dc1ba5740265b0bd2df97cce0a5cb2 1
28. mszuatizo.exe 62c6e831efd04e3b61b30f7bb0a7801b 1
More files