Threat Database Trojans PWS:Win32/OnLineGames.KQ

PWS:Win32/OnLineGames.KQ

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 21
First Seen: January 7, 2013
Last Seen: March 26, 2022
OS(es) Affected: Windows

PWS:Win32/OnLineGames.KQ is a Trojan that steals passwords for online games from affected Internet users. While being installed on the victimized computer, PWS:Win32/OnLineGames.KQ downloads potentially harmful files. PWS:Win32/OnLineGames.KQ is installed as a DLL file, and when loaded by 'iexplore.exe', PWS:Win32/OnLineGames.KQ strives to steal user account credentials if the PC user logs on to any of particular websites. PWS:Win32/OnLineGames.KQ also controls and grabs the computer owner's credentials if particular processes associated with online games are running on the targeted PC. PWS:Win32/OnLineGames.KQ may log the gathered details into specific files. PWS:Win32/OnLineGames.KQ then forwards the collected data to any of websites via HTTP POST.

SpyHunter Detects & Remove PWS:Win32/OnLineGames.KQ

File System Details

PWS:Win32/OnLineGames.KQ may create the following file(s):
# File Name MD5 Detections
1. 21.exe ebefee9de7d429fe00593a1f6203cd6a 4
2. [system folder]\ws2help.dll
3. [system folder]\win32.dll
4. [system folder]\imm32b.dll
5. 0a77ba7b57224b3f9adcdaa2dc3cfc36 0a77ba7b57224b3f9adcdaa2dc3cfc36 0
6. ws2help.dll aa183069409b28591612bb0da9d03fed 0
7. b3b1ff527c249b258374c47572400169 b3b1ff527c249b258374c47572400169 0
8. C__Users_god_AppData_Local_Temp_WinSocketA.dll 2edf4930eb8c9546ea85376d01093563 0
9. ws2help.dll fa274cc86195e51236343b1d0f4ca2a0 0

Registry Details

PWS:Win32/OnLineGames.KQ may create the following registry entry or registry entries:
Regexp file mask
%APPDATA%\gdx.exe
%HOMEDRIVE%\Cache\ModuleW.exe

Trending

Most Viewed

Loading...