Home / Spyware Encyclopedia / GameThief.Ganhame << Back

Recommendation to Automatically remove GameThief.Ganhame


Our products can remove GameThief.Ganhame and thousands of other Virus and Spyware automatically and instantly.

GameThief.Ganhame Details


  • Category GameThief
  • Discovered 8/5/2009 3:29:59 PM
  • Modified 8/3/2023 5:31:13 PM
  • Threat Level Critical
  • Category Description
    A threat that attempts to steal vital information from the user with regards to online gaming activity and is capable of connecting to a remote site to download possible updates of its application.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
toolbar.exe 1788696MEGAUPLOAD3.0.0.19  
reger.exe 183296(c) 2003 - 2004 burewar | russia, moscow3.1.0.59ef1c3d02c00b63dcd3146ce273853e5c 
1C89CED7.EXE 44645  fbd2f4f07ace946f224d40194047fe38 
msTasks.dll 22528  f62a39c77aa4ebc4fc9769d078feaa91 
8A51164A.EXE 41244  db89530f9c1c7b8425a442dbab5695a8 
Trojan-Dropper.Win32.Agent.aol.exe 39638  bfd0cf339d85a3ed0084c21a3ad6204b 
Trojan-Dropper.Win32.Agent.q.exe 170312  a33fc5f495ff4016635b703e981b50bb 
A786D6BB.EXE 38005  912d4411e38e71b8ed5835d39809e5a4 
Trojan-Dropper.Win32.Joiner.am.exe 144711  8451cf4b7866c314fbd70a59be4a3705 
37e70ed4.exe 57344  7a0c8e3898d00462ff734ad5ff8fed52 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"System"\"%WIN.SYS32%\kernels8.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"System"\"%WIN%\svchost.exe"
..\System\CurrentControlSet\Control\\"Impersonate"\"[20423038304084607660]"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"yul"\"%WIN%\coove.exe"
..\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\"draw32"\"{38AD34BF-113A-420B-910B-7673ED571DBD}"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ws_ds"\"%WIN%\sws32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ie_brow"\""%WIN%\ie_32.exe""
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"ws_ds"\"%WIN%\sws32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"sysTasks"\"%WIN.SYS32%\msTasks.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"svcroot"\"%WIN.SYS32%\xffanl.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.