Categories: Malware

What is “Win32/PSW.OnLineGames.POT”?

The Win32/PSW.OnLineGames.POT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/PSW.OnLineGames.POT virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/PSW.OnLineGames.POT?


File Info:
name: C269DC29E5A2531E1B34.mlwpath: /opt/CAPEv2/storage/binaries/5fcac7aed237a85105a32bf7c150924e3d778b0094b699f5612516d71bf5a296crc32: 649ED2D6md5: c269dc29e5a2531e1b34bff1d67c5d64sha1: 1bc920ccc00b960e6294540d7e7300a41da5290bsha256: 5fcac7aed237a85105a32bf7c150924e3d778b0094b699f5612516d71bf5a296sha512: 8ac33f3997043c582df8c1e56f2ca33baf13064bec2851931e9733daf6bbdb6f06b959c15926e32a48dc0aa1f0d0d5f29183d06cd4c611eae2c1cd0e58bec38fssdeep: 3072:l9L1xm6hpbVc+Nn0/d/Q4nDlKPQgO1f5Q:hnhpprNn8o4URif5Qtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T100C3AE9863895A7AE32E8437549A3F37153E31F399D7501B433202A528BE5C1BF0EE5Bsha3_384: fb242324b8d66e25c3e2c2ffd5c4429fcb2225ca50d2904a0be684f8b19d9f06308143193887978d4cebccac956e1873ep_bytes: 558bec81ec1c0100008b450c56485785timestamp: 2011-01-11 12:22:19
Version Info:
0: [No Data]

Win32/PSW.OnLineGames.POT also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Kykymber.lhMk
AVG	Win32:OnLineGames-FUZ [Trj]
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.PWS.Onlinegames.KEGA
FireEye	Generic.mg.c269dc29e5a2531e
CAT-QuickHeal	Trojan.OnLineGames.gen
Skyhigh	BehavesLike.Win32.PWSOnlineGames.ct
ALYac	Trojan.PWS.Onlinegames.KEGA
Cylance	unsafe
Zillya	Trojan.Kykymber.Win32.1662
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004bcce41 )
Alibaba	TrojanPSW:Win32/OnLineGames.8fd23338
K7GW	Trojan ( 0056e0a61 )
Baidu	Win32.Trojan-PSW.Kykymber.a
VirIT	Trojan.Win32.Generic.XK
Symantec	Infostealer.Gampass
ESET-NOD32	a variant of Win32/PSW.OnLineGames.POT
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	Win32:OnLineGames-FUZ [Trj]
ClamAV	Win.Spyware.78845-2
Kaspersky	Trojan-PSW.Win32.Kykymber.dppu
BitDefender	Trojan.PWS.Onlinegames.KEGA
NANO-Antivirus	Trojan.Win32.OnLineGames.bkxdd
Tencent	Trojan.PSW.Win32.MiBao.a
Emsisoft	Trojan.PWS.Onlinegames.KEGA (B)
F-Secure	Trojan.TR/PSW.Kykymber.kxk
DrWeb	Trojan.PWS.Qq.5
VIPRE	Trojan.PWS.Onlinegames.KEGA
TrendMicro	TSPY_KYMBER.SMA
Trapmine	malicious.high.ml.score
Sophos	Mal/PWS-GZ
GData	Win32.Trojan-Spy.OnlineGames.N
Webroot	W32.Malware.Gen
Varist	W32/OnlineGames.FL.gen!Eldorado
Avira	TR/PSW.Kykymber.kxk
MAX	malware (ai score=100)
Antiy-AVL	Trojan[PSW]/Win32.Kykymber.aa
Kingsoft	Win32.PSWTroj.Undef.a
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.PWS.Onlinegames.KEGA
ViRobot	Trojan.Win32.A.PSW-Kykymber.126912.AE
ZoneAlarm	Trojan-PSW.Win32.Kykymber.dppu
Microsoft	PWS:Win32/OnLineGames.IZ
Google	Detected
AhnLab-V3	Win-Trojan/Onlinegamehack37.Gen
Acronis	suspicious
McAfee	PWS-OnlineGames.ke
VBA32	BScope.TrojanPSW.Kykymber
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Kykymber.A
TrendMicro-HouseCall	TSPY_KYMBER.SMA
Rising	Stealer.QQPass!1.659F (CLASSIC)
Yandex	Trojan.PWS.Kykymber!Fd1N5fQcaH4
Ikarus	Trojan-PWS.Win32.Kykymber
MaxSecure	not-a-virus-PSW-OnlineGames.Gen
Fortinet	W32/Onlinegames.XQB!tr
BitDefenderTheta	Gen:NN.ZedlaF.36804.hm7@a0bxCwm
DeepInstinct	MALICIOUS
alibabacloud	RiskWare:Win/OnLineGames.POT