1. /
  2. Security Response/
  3. W32.Gammima.AG


Risk Level 1: Very Low

August 27, 2007
August 27, 2007 11:08:32 AM
Also Known As:
Worm.Win32.AutoRun.bhx [Kaspersky], Trojan-PSW.Win32.OnLineGames.rlh [Kaspersky], Trojan-PSW.Win32.OnLineGames.sxa [Kaspersky]
Infection Length:
75,520 bytes
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
W32.Gammima.AG is a worm that spread by copying itself to removable media. It also steals passwords to various online games.

Note: Symantec strongly recommends that customers take specific steps to control the execution of applications referenced in autorun.inf files that may be located on removable and network drives. Threats such as this one frequently attempt to spread to other computers using these avenues. Configuration changes made to a computer can limit the possibility of new threats compromising it. For more information, see the following document:

How to prevent a virus from spreading using the "AutoRun" feature

Antivirus Protection Dates

  • Initial Rapid Release version August 26, 2007 revision 039
  • Latest Rapid Release version August 21, 2015 revision 016
  • Initial Daily Certified version August 27, 2007 revision 002
  • Latest Daily Certified version August 22, 2015 revision 002
  • Initial Weekly Certified release date August 29, 2007
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Masaki Suenaga

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report