What is Gimmiv?
Gimmiv worm (also known as Win32/Gimmiv) is a big privacy risk. Gimmiv functions quietly in a background; this helps the worm to steal information, spread further and stay unobserved.
Gimmiv worm employs Microsoft server service remote code execution exploit (MS08-067) to infect other computers. Once it finds systems available for infection, it copies certain files that are able to update themselves from the web.
The purpose of Win32/Gimmiv infection is gathering information about compromised systems and delivering it to remote servers. Gimmiv collects usernames and passwords used on various programs (MSN Messenger, Outlook Express, Internet Exporer, etc); it also makes a list of applications installed on the computer, machine’s name, local machine’s adapder details and Windows version.
Gimmiv connects to the following servers to deliver stolen data and to update itself: summertime.1gokurimu.com, doradora.atzend.com, 59.106.145.58 and perlbody.t35.com.
Gimmiv worm employs Microsoft server service remote code execution exploit (MS08-067) to infect other computers. Once it finds systems available for infection, it copies certain files that are able to update themselves from the web.
The purpose of Win32/Gimmiv infection is gathering information about compromised systems and delivering it to remote servers. Gimmiv collects usernames and passwords used on various programs (MSN Messenger, Outlook Express, Internet Exporer, etc); it also makes a list of applications installed on the computer, machine’s name, local machine’s adapder details and Windows version.
Gimmiv connects to the following servers to deliver stolen data and to update itself: summertime.1gokurimu.com, doradora.atzend.com, 59.106.145.58 and perlbody.t35.com.
Gimmiv is Extremely dangerous
Manual Gimmiv removal
Important Note: Although it is possible to manually remove Gimmiv, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.
Remove these Gimmiv processes:
Remove these Gimmiv DLL files:
Remove these Gimmiv Registry files:
Remove these Gimmiv files:
Gimmiv is a typical worm, which means that it is a viral application that spreads itself via internet without any human intervention save for a simple click, which is enough for a worm such as Gimmiv to infect a system. The main difference between a virus and a worm is that Gimmiv does not have to attach itself to an existing program.
The most popular way for a worm parasite like Gimmiv to infect your computer is to spread through email. It usually comes as email file attachment or within an infected email message. Once opened, Gimmiv will install itself into a user’s computer silently, in the background. Such replication is nearly impossible to notice, as no install wizards, warnings or dialogs are being displayed on your screen.
Comment on Gimmiv