Home / Spyware Encyclopedia / GameThief.Ganhame << Back

Recommendation to Automatically remove GameThief.Ganhame


Our products can remove GameThief.Ganhame and thousands of other Virus and Spyware automatically and instantly.

GameThief.Ganhame Details


  • Category GameThief
  • Discovered 8/5/2009 3:29:59 PM
  • Modified 8/3/2023 5:31:13 PM
  • Threat Level Critical
  • Category Description
    A threat that attempts to steal vital information from the user with regards to online gaming activity and is capable of connecting to a remote site to download possible updates of its application.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
2A17289E.DLL 77824 1.0.0.10034c77a5aeb92d4b2da009344a3b78e 
818A5F6C.DLL 78442  f9ba5ca3266bf413487331b7b2f5245b 
msTasks.dll 22528  f62a39c77aa4ebc4fc9769d078feaa91 
Trojan-Dropper.Win32.Microjoin.a.exe 10752  f3b6e42c3fe531ddd721075ab4f75432 
draw32.dll 32736  e792185177bf2e2b7053703c2ccff9da 
ct2dll.dll 23552  cd180bec485a24b9ab31a1cb567eae98 
Trojan-Dropper.Win32.Agent.aol.exe 39638  bfd0cf339d85a3ed0084c21a3ad6204b 
Trojan-Dropper.Win32.Joiner.am.exe 144711  8451cf4b7866c314fbd70a59be4a3705 
ct2dll.dll 19456  63ed4362e3c23abb4a780fc4786aacaa 
93C71A58.EXE 707584  3abadbe7c3c11fb35bc1879f0d33f829 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"System"\"%WIN.SYS32%\kernels8.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"System"\"%WIN%\svchost.exe"
..\System\CurrentControlSet\Control\\"Impersonate"\"[20423038304084607660]"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"yul"\"%WIN%\coove.exe"
..\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\"draw32"\"{38AD34BF-113A-420B-910B-7673ED571DBD}"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ws_ds"\"%WIN%\sws32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ie_brow"\""%WIN%\ie_32.exe""
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"ws_ds"\"%WIN%\sws32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"sysTasks"\"%WIN.SYS32%\msTasks.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"svcroot"\"%WIN.SYS32%\xffanl.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware