PSW.Gamania - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / PSW.Gamania

PSW.Gamania Technical Details

Category

PSW

Discovered

1/19/2007 10:03:00 AM

Modified

2/22/2008 6:38:00 PM

Threat Level

Critical

Description

This family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords

Summary

N/A

When the PSW is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\kerne0223.dll			8f61f3f6bc66615d24db2ed55ee64bd9
..\kerne0223.exe			d1e88717522f6317771e26ac574b6f3f	76800
..\kerne0126.exe			61e416bad08830a3c06527ff8a1926ce	60427
..\ntdlr.dll			791a0d904372fbe6df28d2c5194abd55	57856
..\kavscan.exe			b6babcd2081aef9636aa7827b4ff8539	63946
..\xwdll.dll			ca93f17f06067e8d58efeb0735927a3c	133632
..\61bcab48.dll			9f13660929e39b65132785e926e5c15f	46312
..\trojan-psw.win32.gamania.cr \08c4367e.exe			26a6fac083c9d6d62c28fc2d6abb8990	569143
..\trojan-psw.win32.gamania.ef \ea85c663.exe			8e027977821d8c375305f7c110ae422e	25977
..\trojan-psw.win32.gamania.fi \2e917be0.exe			3c076d244c8571a8d6dfdbfa436ec436	59270
..\trojan-psw.win32.gamania.fh \4a2fb2a1.dll			1d90c7b68a8c2041c5e76bf9afa7e56e	118272
..\trojan-psw.win32.gamania.fh \089737ea.exe			74c187f1524a72b11a44986de669d40c	59120
..\trojan-psw.win32.gamania.fe \c848735c.exe			4a3b50e53bcdfc8c91aa08847936829e	59076
..\trojan-psw.win32.gamania.fc \112866d5.exe			8abde519a66d7d9419da58f3c779bcbd	59710
..\trojan-psw.win32.gamania.ev \c8cc3d8e.dll			9e9e976ff284bf2e11d382a453ecaec7	117760
..\trojan-psw.win32.gamania.et \405008d9.exe			a6faea1afc3225bca2e5e85da6e9f516	59632
..\trojan-psw.win32.gamania.em \8796923c.dll			9723e6478313396d7c4cf4cfd4fc448b	128512
..\trojan-psw.win32.gamania.ek \03867c29.exe			f02234b93fb2a20a41905bbc01f52eac	59661
..\trojan-psw.win32.gamania.dv \9cf2c19d.exe			510abe1c62d8d117a0c95ff310fa4825	24633
..\trojan-psw.win32.gamania.du \5a3a243f.dll			ed6b6432b4e05ba209a7ba88a47c466a	125952
..\trojan-psw.win32.gamania.dt \11098808.exe			9ad50ae0b63ef5b54305bab5f39a4fa9	59819
..\trojan-psw.win32.gamania.dp \38a092a0.exe			ca19fb7dcade95cf7b79d5186e07c324	59419
..\trojan-psw.win32.gamania.dc \e2fa6ffc.exe			3100f34373ba3c059b3039eacb63d733	58906
..\trojan-psw.win32.gamania.dc \8783df5f.dll			a3a63aab55ef58fc63c1bbd59e708cc9	107008
..\trojan-psw.win32.gamania.dc \31fcb878.exe			d687b076a05c55be466c717121080d70	58889

When the PSW is executed, it creates the following Registry entries:

•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"xw"
•	..\Software\Classes\Clsid\{84f1446d-9606-46d2-ac38-8aeaa6dcc868}
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"kerne0126"

Recommendation to remove PSW.Gamania

Spyware Detector can remove PSW.Gamania, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat