W32/Gamarue-AN

Category: Viruses and Spyware Protection available since:04 Mar 2013 16:28:24 (GMT)
Type: Win32 worm Last Updated:04 Mar 2013 16:28:24 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Gamarue-AN exhibits the following characteristics:

File Information

Size
32K
SHA-1
81a1addead705d6e6844ad61961bb75967325511
MD5
534169906110364f325bdfb63b1aa144
CRC-32
a9cd8b0f
File type
application/x-ms-dos-executable
First seen
2013-03-04

Runtime Analysis

Copies Itself To
  • C:\Documents and Settings\All Users\svchost.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    SunJavaUpdateSched
    C:\Documents and Settings\All Users\svchost.exe

download Try Sophos products for free
Download now