Gammima

Last Updated: August 18, 2011

Definition - What does Gammima mean?

Gammima is a common term describing W32.Gammima.AG, which is a computer worm capable of replicating itself on all the drives present in an operating system including removable storage media such as flash drives, USB, etc...

Some popular online games played in the Far East are especially at risk. This virus attempts to collect user passwords and send them to a central server.

Techopedia explains Gammima

The virus was first detected on the International Space Station (ISS) in August 2007. NASA (National Aeronautics and Space Administration in the U.S.) reported that laptops aboard the ISS were infected with the worm. However, the command and control systems of the ISS remain unaffected since the virus only targets passwords and user accounts of online games. The laptops carried by the astronauts do not have any anti-virus protection. Thus, the virus remained undetected for almost three months.

The ISS did not have a direct Internet connection and all data traffic being transmitted from Mission Control to the ISS was monitored for content. The virus may have been transmitted from an astronaut's USB drive.

The worm propagates itself on all removable storage media on the victim’s computer. Every time the operating system begins, the worm launches itself and searches for new removable drives. The worm steals information related to online games. The user should take precautions to deny all incoming connections and only allow trusted services. The worm is also capable of monitoring the Internet Explorer browser and stealing passwords for the Maple Story online game. The stolen information is sent through email or HTTP to a central server. The worm also searches for anti-malware programs installed on the victim’s computer and may attempt to disable it.