Home > Worm > Gimmiv

How to remove Gimmiv?

November 20th, 2008

What is Gimmiv?

Gimmiv worm (also known as Win32/Gimmiv) is a big privacy risk. Gimmiv functions quietly in a background; this helps the worm to steal information, spread further and stay unobserved.

Gimmiv worm employs Microsoft server service remote code execution exploit (MS08-067) to infect other computers. Once it finds systems available for infection, it copies certain files that are able to update themselves from the web.

The purpose of Win32/Gimmiv infection is gathering information about compromised systems and delivering it to remote servers. Gimmiv collects usernames and passwords used on various programs (MSN Messenger, Outlook Express, Internet Exporer, etc); it also makes a list of applications installed on the computer, machine’s name, local machine’s adapder details and Windows version.

Gimmiv connects to the following servers to deliver stolen data and to update itself: summertime.1gokurimu.com, doradora.atzend.com, 59.106.145.58 and perlbody.t35.com.


Gimmiv is Dangerous

arrow Gimmiv is a malicious Worm parasite
arrow Gimmiv may install other spyware parasites
arrow Gimmiv will replicate and email itself to contacts in your address book.
arrow Gimmiv may come bundled with or spread other spyware
arrow Gimmiv may prove difficult or impossible to remove
arrow Gimmiv violates your privacy and compromises your security

Manual Gimmiv removal


Important Note: Although it is possible to manually remove Gimmiv, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.

Stop these Gimmiv processes:
Disable these Gimmiv DLL files::
Remove these Gimmiv Registry Entries:
Remove these Gimmiv files:

Gimmiv is a typical worm, which means that it is a viral application that spreads itself via internet without any human intervention save for a simple click, which is enough for a worm such as Gimmiv to infect a system. The main difference between a virus and a worm is that Gimmiv does not have to attach itself to an existing program.

The most popular way for a worm parasite like Gimmiv to infect your computer is to spread through email. It usually comes as email file attachment or within an infected email message. Once opened, Gimmiv will install itself into a user’s computer silently, in the background. Such replication is nearly impossible to notice, as no install wizards, warnings or dialogs are being displayed on your screen.


How to tell if your PC has been infected by a Worm such as Gimmiv?

Slower System Performance: Most worms are not optimized and coded very poorly, which causes your system to become unstable, slow and unreliable, as such worm parasites are constantly running in the background.
Slower Internet Connection: As worms are viral parasites that spread via networks, you may feel that your internet connection has become slower than it was before.

Worm

  1. No comments yet.
  1. No trackbacks yet.