Win32/PSW.OnLineGames.QNK information

The Win32/PSW.OnLineGames.QNK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/PSW.OnLineGames.QNK virus can do?

• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Dynamic (imported) function loading detected
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes its original binary from disk

How to determine Win32/PSW.OnLineGames.QNK?

File Info:
name: 95491310AE22A4F86534.mlw
path: /opt/CAPEv2/storage/binaries/ee0a500e4bc9a741ceef6030387e4b1a490a170769582835bec0186147bf19b1
crc32: 249AB6AC
md5: 95491310ae22a4f86534c0477f8379df
sha1: 073678efc5d77921156b01106a2c62a05e40e5e0
sha256: ee0a500e4bc9a741ceef6030387e4b1a490a170769582835bec0186147bf19b1
sha512: d679c3026b99d917ce5fa65112370c4eb5ed6b18c546f18533d4bd2fe0e70cfe2935049cb462bc60b3083d6dc09179a76d0a83bf4870ef3ccee919c0f2d1aa46
ssdeep: 384:Y43Q95mwoO43xGETukROvPR/6PRkfcEDsleNOyzElF8E6QtQJL8bTawzX:c/mwoO4xakROvZ6P7CslT16QqqT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E892D0E137B9DC6AF2D3473C46615F92AA44E3B1CBAF42F22D0C512FED271106E16910
sha3_384: 8a31cefc1a750a8e24674b149f3c18db8d0052f840bc0aeffebe3f3321f5dad71e7f9f356197caa65793b1c1ef57c253
ep_bytes: 60be001041008dbe0000ffff5783cdff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Win32/PSW.OnLineGames.QNK also known as:

How to remove Win32/PSW.OnLineGames.QNK?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.