W32/Gamarue-AQ

Category: Viruses and Spyware Protection available since:02 Apr 2013 13:13:18 (GMT)
Type: Win32 worm Last Updated:02 Apr 2013 13:13:18 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Gamarue-AQ exhibits the following characteristics:

File Information

Size
55K
SHA-1
a0bd2ee698848dc40f41ce593c9668ccf7dd1993
MD5
340c860492c5ee5f708dfee57f650cd3
CRC-32
c0c8ef6a
File type
application/x-ms-dos-executable
First seen
2013-04-02

Runtime Analysis

Copies Itself To
  • C:\Documents and Settings\All Users\svchost.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    SunJavaUpdateSched
    C:\Documents and Settings\All Users\svchost.exe

download Try Sophos products for free
Download now