Delete Worm:Win32/Gamarue.B

Worm:Win32/Gamarue.B is a dangerous computer worm which can cause serious damage to your computer. This worm typically enters your computer through a spam email which indicates something about “payments” in the subject. This worm can be particularly tricky to get rid of because it creates files and registry entries in multiple locations on your computer.

Worm:Win32/Gamarue.Bis particularly modern and can outwit some older anti-virus software programs.


Signs that your computer is infected with Worm:Win32/Gamarue.B include your computer being bombarded with pop-ups, Internet searches being redirected to websites trying to sell you scam malware programs and programs being blocked on your computer. Worse, this worm is known to collect your personal data and send it to third parties. If you have determined your computer is infected with Worm:Win32/Gamarue.B, you will need to remove it as soon as possible. Here are the steps to manually remove Worm:Win32/Gamarue.B:

Step One: Open Task Manager (CTRL+ALT+DEL) and end:
*ComboFix.exe
*DealScoutUpdateCheck.exe
*diskrun.exe
*HVVVelIBBtPNA1.exe
*%TEMP%\.com
*5df6ffed.com
Step Two: Open files and folders to find and remove:
*%TEMP%\<8 hexadecimal characters>.com
*diskrun.exe
*autorun.inf
*ComboFix.exe
*5df6ffed.com
*HVVVelIBBtPNA1.exe
*DealScoutUpdateCheck.exe

Step Three: Open your Registry Editor (START to RUN type in “regedit” and hit OK) and delete:


*HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\2600
*HKEY_LOCAL_MACHINE\Software\ Worm:Win32/Gamarue.B