Malware

What is “PWS:Win32/Lolyda.AA”?

Malware Removal

The PWS:Win32/Lolyda.AA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:Win32/Lolyda.AA virus can do?

  • Authenticode signature is invalid

How to determine PWS:Win32/Lolyda.AA?


File Info:

name: 00C5BF7D361509B0F82E.mlw
path: /opt/CAPEv2/storage/binaries/27b84f785b32c8ce8f955d177e83a890f016296a59d4be7bddec72793b4d72c0
crc32: 62D41C75
md5: 00c5bf7d361509b0f82e682bece06933
sha1: ff54819bb617521853940aeed2311d2e44d5a4a5
sha256: 27b84f785b32c8ce8f955d177e83a890f016296a59d4be7bddec72793b4d72c0
sha512: af61e818c6d3314778235418e998dee478f71f535d6f7d19741d992878ed127e3f97bd3223a0053a13e74b7803404bab7bc39fd3ba522618a47c21d871f459c1
ssdeep: 768:quTnQaAOfWKESIiTbhZodYNBBQARQkQoRVXvi:tnQPfSTo4BBQARAev
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1AAB2D627399694F2D38A0971B95D27752AFC1D3296389961EB3076083FF56E3E3210D3
sha3_384: 0e22a143fbfca9cb994db1120f929931046ea9cde7009ed7b162ef5247010edbc8e37821a4cf1035604c51afe1385e23
ep_bytes: 558bec81c4e0feffff60837d0c010f85
timestamp: 2009-01-07 14:36:44

Version Info:

0: [No Data]

PWS:Win32/Lolyda.AA also known as:

LionicTrojan.Win32.OnLineGames.l4XC
tehtrisGeneric.Malware
CynetMalicious (score: 100)
FireEyeGeneric.mg.00c5bf7d361509b0
CAT-QuickHealTrojan.OnLineGames.gen
SkyhighBehavesLike.Win32.Klez.mm
McAfeeGeneric PWS.am
ZillyaTrojan.OnLineGames.Win32.7953
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:Win32/OnLineGames.3727240c
K7GWTrojan ( 000ff4001 )
K7AntiVirusTrojan ( 000ff4001 )
BaiduWin32.Trojan-PSW.OLGames.ae
VirITTrojan.Win32.OnlineGames4.MWU
SymantecInfostealer.Onlinegame
Elasticmalicious (high confidence)
ESET-NOD32Win32/PSW.OnLineGames.NTM
APEXMalicious
ClamAVWin.Trojan.OnlineGames-1365
KasperskyTrojan-GameThief.Win32.OnLineGames.ufye
BitDefenderTrojan.PWS.OnlineGames.DCU
NANO-AntivirusTrojan.Win32.OnLineGames.csstpm
MicroWorld-eScanTrojan.PWS.OnlineGames.DCU
AvastWin32:Lolyda [Trj]
TencentTrojan.Win32.OnlineGames.pm
SophosTroj/PWSA-Fam
F-SecureTrojan.TR/Thief.Games.ubha
DrWebTrojan.DownLoad.26597
VIPRETrojan.PWS.OnlineGames.DCU
TrendMicroTSPY_ONLINEG.TOS
Trapminemalicious.high.ml.score
EmsisoftTrojan.PWS.OnlineGames.DCU (B)
IkarusGeneric.PWS.Games
GDataTrojan.PWS.OnlineGames.DCU
JiangminTrojan/PSW.OnLineGames.avea
WebrootW32.Lolyda.Gen
VaristW32/PWStealer.OIH
AviraTR/Thief.Games.ubha
MAXmalware (ai score=89)
Antiy-AVLTrojan[GameThief]/Win32.OnLineGames
KingsoftWin32.Troj.OnlineGamesT.fd.25600
XcitiumTrojWare.Win32.GameThief.OnlineGames.~RM@1qn6m
ArcabitTrojan.PWS.OnlineGames.DCU
ViRobotTrojan.Win32.PSWIGames.25600.AX
ZoneAlarmTrojan-GameThief.Win32.OnLineGames.ufye
MicrosoftPWS:Win32/Lolyda.AA
GoogleDetected
AhnLab-V3Trojan/Win32.OnlineGameHack.R2063
Acronissuspicious
BitDefenderThetaAI:Packer.906413011B
ALYacTrojan.PWS.OnlineGames.DCU
TACHYONTrojan-PWS/W32.WebGame.25600.CU
VBA32Trojan-GameThief.OnLineGames
Cylanceunsafe
PandaTrj/OnLineGames.gen
TrendMicro-HouseCallTSPY_ONLINEG.TOS
RisingStealer.OnlineGames!1.6AAC (CLASSIC)
YandexTrojan.OnlineGames.Gen.107
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.875197.susgen
FortinetW32/OnlineGames.HLG!tr.pws
AVGWin32:Lolyda [Trj]
DeepInstinctMALICIOUS

How to remove PWS:Win32/Lolyda.AA?

PWS:Win32/Lolyda.AA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment