Worm:Win32/Gamarue

[44surf]

Microsoft Security Security essentials indicated that my desktop was infected with worm:win32/gamarue.B. It said it was removed, but the task manager showed it as running. I ended the task and I am running a full system virus scan. It seems that the worm first infected the computer on 12/5. The history says allowed then removed. It seems to be running at start up. I shut down the computer every night. Any suggestions? I am posting from my laptop which is not infected...at least so far. Thanks in advance for your help. The full scan said it found no threats.

 

[Dark Lord of Tech]

Just burn it as is it will run when you go to use it.

 

[aford10]

I just downloaded that superantispyware. I know that this is pathetic...but how exactly do I save that to a cd?

You don't need to. It can be ran in safe mode with networking.

If you want to create a boot disc to scan the drive, try the AVG rescue disc from the guide.

 

[44surf]

@51~I just downloaded that superantispyware and saved it to a cd and now in my task manager it says that wormwin32gamarue is running on this computer!!!

 

[verbalizer]

too late to restore to the day before this virus appeared.?

 

[verbalizer]

and what has your son been doing (or you) on both your units.?
especially the one I built with you.

 

[44surf]

oops! My bad! I think that the message in the task manager was just reading out the thread title. Sooooo embarrassing! LOL. The child told me.

 

[44surf]

Hi mal!

 

[verbalizer]

Hi mal!

 

[44surf]

Like the sig picture.

 

[verbalizer]

much appreciated.
how's the family (besides your computer issue).?

 

[44surf]

and what has your son been doing (or you) on both your units.?
especially the one I built with you.

He plays games on this one...so one can only guess! He is always asking if he can download something or other. Although I think this worm might have come in with an email. The MSE history shows it making it's way to my system at 4:40 am and 6:40 am and then being removed about 10 minutes after. Should I leave these detection notices in my history? As long as it says it was removed it's ok right? Not sure about the one that says it was allowed.

Family's good. The boy is mad because I won't let him use my laptop while I clean this one...poor baby.

 

[verbalizer]

sounds like you have everything under control mom...
go into the virus control on the one that says allowed and then tell the anti-virus/firewall to dis-allow it and then clean the unit.

 

[44surf]

It does not show in the allowed section...just that it was allowed in the history. The allowed items only and quarantined items only sections are empty.

I am thinking maybe I should try a different virus protection program....hmmm....because now I feel a little paranoid!

 

[verbalizer]

sounds OK, which program are you using now.?

 

[44surf]

Microsoft Security essentials.

 

[44surf]

It does seem like it caught the worm...but in the past when I have switched virus ware programs, the new one always seems to find things on my system.

 

[verbalizer]

you might not need to but if you want another good option and the one I use myself then here:
http/www.comodo.com/home/internet-security/free-internet-security.php

 

[44surf]

http/www.superantispyware.com/portablescanner.html

Download and run this,no need to update ^

[:briovaz:3]

Hi 51. I burned this download...it was under a random name. I found it by the date and time of the download. Should I just load it on the computer? My email is acting strange. I don't know if it is something verizon has changed or something more ominous. Thanks.

 

[Dark Lord of Tech]

It is a portable app,just click it to run

 

[44surf]

It is a portable app,just click it to run

Hi 51~I am currently running the app on my desktop...the system with the worm. So far it has found 738 threats...adware tracking cookies. I should probably run it on our laptop also. Should I delete the download first? Or does it not matter? Hope my question makes sense.

ETA And one trojen. Sheeesh!