MSIL/PSW.OnLineGames.CDM information

The MSIL/PSW.OnLineGames.CDM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/PSW.OnLineGames.CDM virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine MSIL/PSW.OnLineGames.CDM?


File Info:
name: 601716527D7D309F5E51.mlw
path: /opt/CAPEv2/storage/binaries/95a131d944b91ee58259c9c7e2cd065a0c21c67f0aac35299ba26969f1a8f8f4
crc32: CF3E166A
md5: 601716527d7d309f5e5123af0371c3e5
sha1: 7c206667343c346003507ff0d4450120e688f214
sha256: 95a131d944b91ee58259c9c7e2cd065a0c21c67f0aac35299ba26969f1a8f8f4
sha512: bbf93c0aeea243d1f18d72b95887e21955a54e883fc634e8be6db0e971f0d3a6d3e185cf9cee5f12c9970dd92f5358050502b2e6371fc46358c3446ead6597df
ssdeep: 12288:4mSOBN/Ew4Zl+l4vVkD5z4vtEm04xtextFFrrRh5m:l0XQ4nenjrrRTm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A1549743B7896E6D2EB8670D89E730281606CB3E4D2C5AAF8823F591755703DF8173A
sha3_384: df687997e8b26bf6d33be13486370d0852c46e3211880e0071c816d9725c64157541aa5acebe8018e35980cd07c2e476
ep_bytes: ff2500204000c38bec83e4f883ec08a1
timestamp: 2022-08-06 14:42:41

Version Info:
Translation: 0x0000 0x04b0
Comments: Rina Roleplay Launcher / Client
CompanyName: Rina Roleplay
FileDescription: Rina Roleplay
FileVersion: 1.0.0.0
InternalName: Rina.Client.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: Rina Roleplay
OriginalFilename: Rina.Client.exe
ProductName: Rina.Client.Properties
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/PSW.OnLineGames.CDM also known as:

Bkav	W32.AIDetectNet.01
Cynet	Malicious (score: 99)
Cyren	W32/MSIL_Agent.BLH.gen!Eldorado
ESET-NOD32	a variant of MSIL/PSW.OnLineGames.CDM
ClamAV	Win.Malware.Dopping-9843036-0
BitDefender	Gen:Variant.Bulz.837812
MicroWorld-eScan	Gen:Variant.Bulz.837812
Ad-Aware	Gen:Variant.Bulz.837812
Emsisoft	Gen:Variant.Bulz.837812 (B)
VIPRE	Gen:Variant.Bulz.837812
FireEye	Gen:Variant.Bulz.837812
Ikarus	Trojan.Crypt
GData	Gen:Variant.Bulz.837812
Avira	TR/Dropper.Gen
Arcabit	Trojan.Bulz.DCC8B4
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.Generic.C4753083
ALYac	Gen:Variant.Bulz.837812
MAX	malware (ai score=86)
Malwarebytes	Backdoor.Quasar.MSIL
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.34582.2m0@aKXJeId

How to remove MSIL/PSW.OnLineGames.CDM?

MSIL/PSW.OnLineGames.CDM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X