Ginwui is a backdoor that provides the attacker with unauthorized remote access to the compromised computer. The intruder can take screenshots of user activity, execute system commands and collect system information. Ginwui is able to hide its presence in the system. The backdoor runs on every Windows startup. Ginwui is usually installed by other parasites. Some of them may arrive as infected Microsoft Word files that exploit certain Microsoft Word vulnerabilities.