Categories: Malware

PWS:Win32/OnLineGames.DL!dll removal instruction

The PWS:Win32/OnLineGames.DL!dll is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:Win32/OnLineGames.DL!dll virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
edgedl.me.gvt1.com

How to determine PWS:Win32/OnLineGames.DL!dll?


File Info:

crc32: EA79A1D5md5: 340a7796b108a6795024c5bd9d8c9d9fname: 340A7796B108A6795024C5BD9D8C9D9F.mlwsha1: 14a61edd181c338d97ef273883a1cf028360d68esha256: 26656425ead67843bc9e3f4a444e0a514ec08118f84d4ff84b9a70f0e6c49552sha512: 268f6a15484a114bbda412ae5663d06809b8aae6eda5eaa2c134bf468458b875f520a25c27d61dcb4c76437ddf095cc6f7771043b560c33b217b2f9891c746b1ssdeep: 3072:0PhmUFy8ftGq4WvjxOaxGjEHvsTp73uzKPCM:yFy8FB4W7gRj0UTp73uzMCMtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

PWS:Win32/OnLineGames.DL!dll also known as:

Bkav W32.AIDetect.malware2
K7AntiVirus Trojan ( 0054b3a81 )
Lionic Trojan.Win32.Generic.kYJw
Elastic malicious (high confidence)
DrWeb Trojan.MulDrop.31693
Cynet Malicious (score: 100)
ALYac Packer.Malware.NSAnti.1
Cylance Unsafe
Zillya Backdoor.Krap.Win32.9451
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
Alibaba TrojanPSW:Win32/OnLineGames.7ddae727
K7GW Trojan ( 00004eab1 )
Cybereason malicious.6b108a
Cyren W32/Zbot.W.gen!Eldorado
Symantec Trojan.Packed.NsAnti
ESET-NOD32 a variant of Win32/Pacex.Gen
Zoner Probably Heur.ExeHeaderH
APEX Malicious
Avast Win32:Oliga [Trj]
Kaspersky Packed.Win32.Krap.b
BitDefender Packer.Malware.NSAnti.1
NANO-Antivirus Trojan.Win32.NSAnti.fthc
MicroWorld-eScan Packer.Malware.NSAnti.1
Tencent Win32.Virus.Agent.tsk
Ad-Aware Packer.Malware.NSAnti.1
Sophos ML/PE-A + Mal/Behav-204
Comodo TrojWare.Win32.PSW.Gamania.GenA@1oom6i
BitDefenderTheta AI:Packer.715D82071D
VIPRE Trojan.Win32.Generic!SB.0
TrendMicro Mal_Nsanti-5
McAfee-GW-Edition BehavesLike.Win32.Generic.cc
FireEye Generic.mg.340a7796b108a679
Emsisoft Packer.Malware.NSAnti.1 (B)
SentinelOne Static AI – Malicious PE
Jiangmin Packed.Krap.Gen.a
Webroot W32.InfoStealer.OnlineGames.Gen
Avira TR/Crypt.XPACK.Gen
eGambit Generic.PSW
Antiy-AVL Trojan/Generic.ASMalwS.7D88A6
Kingsoft Win32.Heur.KVMH004.a.(kcloud)
Microsoft PWS:Win32/OnLineGames.DL!dll
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Packer.Malware.NSAnti.1
AhnLab-V3 Trojan/Win32.Magania.R31316
Acronis suspicious
McAfee PWS-Gamania.gen.a
MAX malware (ai score=100)
VBA32 Malware-Cryptor.Win32.NSAnti
Panda Generic Malware
TrendMicro-HouseCall Mal_Nsanti-5
Rising Trojan.Win32.FakePe.a (CLASSIC)
Yandex Trojan.Lineage.Gen!Pac.3
Ikarus Packer.Win32.Krap
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Packed.ONLINEGAMES.gen!tr
AVG Win32:Oliga [Trj]
Paloalto generic.ml

How to remove PWS:Win32/OnLineGames.DL!dll?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

39 mins ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

39 mins ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago