Malware

PWS:Win32/OnLineGames!pz removal

Malware Removal

The PWS:Win32/OnLineGames!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:Win32/OnLineGames!pz virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine PWS:Win32/OnLineGames!pz?


File Info:

name: 85415BF650078E823EC0.mlw
path: /opt/CAPEv2/storage/binaries/5e7749b18fdb70a5ebeeccbe6dbbce8ecbca71821bf56e149bb0f9d4bcb7f596
crc32: 8D543505
md5: 85415bf650078e823ec006b744643624
sha1: 2ce51b2cc8f1ae29bf6d10558fe7bceac11ee14d
sha256: 5e7749b18fdb70a5ebeeccbe6dbbce8ecbca71821bf56e149bb0f9d4bcb7f596
sha512: dfd64c87fd0797496e8a989b294a32ee94d4abffeda137929d8a27345f6b8e3bd874d54bbaa42f5d09ce50b8e668b2e43fdf2300bec3a4ec3f05302c4f7e5ccb
ssdeep: 3072:GmYmMZIDeItmTSMoHoPfpzNlOFCy3kinHLKzt:SIATSLH62FCy0ya
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1BF746D03399A4134E958413C247A2F73DA3BAF712759E9C35722FCE81C369A35D2A74B
sha3_384: 8f55677656c67ec9b6062d786648892868c28237d4bb24b6779a7377790b3f9e096319cd89bbf3a1e552498c92e6e7eb
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2013-04-12 16:59:12

Version Info:

0: [No Data]

PWS:Win32/OnLineGames!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.OnLineGames.trcV
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Wsgame.39873
MicroWorld-eScanGen:Variant.Barys.319016
ClamAVWin.Malware.Onlinegames-9910036-0
FireEyeGeneric.mg.85415bf650078e82
SkyhighBehavesLike.Win32.PWSOnlineGames.fz
ALYacGen:Variant.Barys.319016
Cylanceunsafe
ZillyaTrojan.OnLineGames.Win32.176211
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan ( 004ff5ce1 )
AlibabaTrojanPSW:Win32/OnLineGames.c297cf03
K7GWTrojan ( 004ff5ce1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Barys.D4DE28
BitDefenderThetaGen:NN.ZedlaF.36680.u84@aaBK4tdj
VirITTrojan.Win32.OnlineGames4.AKTF
SymantecInfostealer.Gampass
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/PSW.OnLineGames.QOX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-PSW.Win32.OnLineGames.tavh
BitDefenderGen:Variant.Barys.319016
NANO-AntivirusTrojan.Win32.OGames.brsvnj
SUPERAntiSpywareTrojan.Agent/Gen-PWS
AvastWin32:OnLineGames-GGZ [Trj]
RisingStealer.OnlineGames!1.64BA (CLASSIC)
EmsisoftGen:Variant.Barys.319016 (B)
F-SecureTrojan.TR/PSW.Ogames.AC
BaiduWin32.Trojan-PSW.OLGames.t
VIPREGen:Variant.Barys.319016
TrendMicroTROJ_ONLINEGAMES_EH280001.UVPM
SophosMal/GamerPWS-C
IkarusTrojan-PSW.OnlineGames
JiangminTrojan/Generic.avuzm
WebrootW32.Malware.Gen
GoogleDetected
AviraTR/PSW.Ogames.AC
MAXmalware (ai score=83)
Antiy-AVLTrojan[PSW]/Win32.OnLineGames.qox
Kingsoftmalware.kb.a.997
XcitiumTrojWare.Win32.Magania.OC@4pispi
MicrosoftPWS:Win32/OnLineGames!pz
ViRobotTrojan.Win32.PSWIGames.339968.L
ZoneAlarmTrojan-PSW.Win32.OnLineGames.tavh
GDataWin32.Trojan.PSE.17CUJBQ
VaristW32/OnlineGames.IH.gen!Eldorado
AhnLab-V3Win-Trojan/Wgames.Gen
McAfeePWS-FAWM!85415BF65007
VBA32BScope.TrojanPSW.Stealer
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_ONLINEGAMES_EH280001.UVPM
TencentTrojan.Win32.OnlineGame.n
YandexTrojan.GenAsa!oAKOgQHki6Q
SentinelOneStatic AI – Malicious PE
MaxSecurePSW.OnLineGames.gen
FortinetW32/OnLineGames.QHB!tr.pws
AVGWin32:OnLineGames-GGZ [Trj]
DeepInstinctMALICIOUS

How to remove PWS:Win32/OnLineGames!pz?

PWS:Win32/OnLineGames!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment