Share via

Worm:Win32/Gamarue.I

Anonymous
2017-03-30T03:18:52+00:00

Hi all.

My machine is affected with the virus named Worm:Win32/Gamarue.I  and it detected by Microsoft Defender and also it removes and shows your PC is monitored and protected. But this malware does not removed form my machine, when ever I scan the machine again, that worm will be there... I don't know because of this worm, my Ext hard disk also not working ( "It shows folder is empty" but still have my files in the hard disk. Please help me to solve this

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2017-03-30T18:12:03+00:00

    <<https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Worm:Win32/Gamarue.I>> Malware Protection Center Worm: Win32/Gamarue.I

    Clear up your Temp File/Cache.Clean up the system (clearing out all the temp/tmp folders, and included all offline content, clearing the browser tif, delete cookies, etc. etc..

    (Important*:*One of the normal steps in eliminating malicious programs is to entirely delete the contents of all Temp folders.

    <<https://wiki.umbc.edu/pages/viewpage.action?pageId=1867904>>

    Internet Options> General tab> Browsing History> Delete> uncheck "Preserve Favorites website data" then delete Temporary Internet Files. delete Cookies, History, Passwords, etc.

    To verify that the cookie files are deleted, follow these steps:

    Do one of the following:

    click Start, type inetcpl.cpl in the Start Search box, and then press ENTER

    In the Internet Properties dialog box, on the General tab, click Settings under Browsing History.

    In the Temporary Internet Files and History Settings dialog box, clickView Files. This opens the folder where your cookie files are stored.

    In the folder that you opened , press CTRL+A, CTRL+D press Enter to delete the cookies

    Exit

    Reboot

    Also, suggest that you scan your computer using MalwareBytes' to remove any traces that may still be present.

    MalwareBytes Anti-Malware (MBAM)

    https://www.malwarebytes.org/mwb-download/

    The free version of MBAM is an on-demand scanner and offer no 'real-time' protection. Keep installed and use it as 'second-opinion' scanner.

    Pləase make certain you uncheck the box before Enable free trial of Malwarəbytes Anti-Malware Premium.

    Revert to Malwarebytes Free from Premium Trial?

    <<http://goo.gl/0TkcEN>>

    --

    Also run:

    Emsisoft Emergency Kit:

    <<http://blog.emsisoft.com/2015/06/09/how-to-find-and-clean-malware-infections-with-emsisoft-emergency-kit/>> <<https://www.bleepingcomputer.com/download/emsisoft-emergency-kit/>>

    ~

    ESET Free Online Scanner

    <http://www.eset.eu/eset-online-scanner>

    ~

    SUPERAntiSpyware Free Online scan

    <<http://www.superantispyware.com/onlinescan.html>>

    ~

    AdwCleaner

    << https://toolslib.net/downloads/viewdownload/1-adwcleaner/>>

    ~

    I would suggest you to install those tools one by one and restart the computer after running əach tool to check if the issue is clear.

    ~

    2 people found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2017-04-12T05:09:00+00:00

    Thanks 

    My both Machine and external hard disk are clear now.  The Microsoft Defender woks well on my machine. And i connected my external hard disk with ubuntu, it shows all the files in the hard disk, and i removed unwanted files .

    Its clear now.

    Thanks to everyone for trying to solve my issue

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2017-04-12T06:13:01+00:00

    You're welcome, glad to have been of service and thanks for posting back.

    .

    0 comments
  3. Anonymous
    2017-03-30T16:05:48+00:00

    Thanks for your reply bhringer .

    I did not try to activate any Microsoft products intentionally,

    My machine is clear now, but the defender cannot remove the worm from my hard disk.

    Still detecting it when ever I scan with defender, and showing Folder is empty

    0 comments
  4. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2017-03-30T04:06:42+00:00

    Worm:Win32/Gamarue.I

    https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Worm:Win32/Gamarue.I

    HackTool:Win32/AutoKMS

    https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=HackTool:Win32/AutoKMS

    The second detection suggests you are trying to illegally activate Windows operating system and if you have intentionally download the HackTool for that purpose your inquiry will not be addressed in this (Microsoft Community) forum.

    Your screenshot indicates you may have this tool running.

    .

    ~bhringer

    0 comments