Home Malware Programs Worms Trojan-GameThief.Win32.Magania.cmak

Trojan-GameThief.Win32.Magania.cmak

Posted: November 10, 2009

Threat Metric

Threat Level: 9/10
Infected PCs: 6,371
First Seen: July 24, 2009
Last Seen: June 9, 2023
OS(es) Affected: Windows

Trojan-GameThief.Win32.Magania.cmak is a harmful Trojan horse that enters users' systems without their knowledge or consent. Trojan-GameThief.Win32.Magania.cmak, also known as Worm.Win32.Taterf, can set the drive to autoplay by creating an autorun.inf file in its root directory. If the PC's drive is shared across a network then other remote computers can be infected everytime they try to access the shared network. Trojan-GameThief.Win32.Magania.cmak can also download a malicious application that attempts to steal passwords, login details, and other confidential information. Trojan-GameThief.Win32.Magania.cmak also shows a tendency of downloading other malicious files from the Internet and automatically execute it into the victim's machine. Trojan-GameThief.Win32.Magania.cmak must be eliminated from the system immediately if detected.

Aliases

SHeur2.AWLI [AVG]Win32/Frethog.FAB [eTrust-Vet]Troj/Agent-KVP [Sophos]Trojan.PWS.Wsgame.12824 [DrWeb]TrojWare.Win32.PSW.OnLineGames.NNU69 [Comodo]Trojan.PWS.OnlineGames.KCRO [BitDefender]Trojan-GameThief.Win32.Magania.busx [Kaspersky]Win32.GenericPWS.Ak [eSafe]W32/Trojan3.BER [F-Prot]TrojanGameThief.Magania.busx [CAT-QuickHeal]W32/OnlineGames.FND!tr.pws [Fortinet]Worm.Generic.52663 [BitDefender]Win.Trojan.Agent-48158 [ClamAV]W32/Magania.RX [F-Prot]W32/Lineage.KGT [Panda]
More aliases (1650)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\TEMP\GuardGuard.exe File name: GuardGuard.exe
Size: 266.42 KB (266424 bytes)
MD5: c09876c94545d84c462f649428fe0026
Detection count: 103
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\TEMP
Group: Malware file
Last Updated: May 17, 2020
%WINDIR%\system32\ahnsbsb.exe File name: ahnsbsb.exe
Size: 165.58 KB (165586 bytes)
MD5: 2a4c67aca49cdd25e85abedc008b1b37
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 13, 2011
%WINDIR%\system32\oukdfgr.exe File name: oukdfgr.exe
Size: 172.26 KB (172261 bytes)
MD5: 43b89c78c63765765e8fe16d8478cfaa
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 16, 2011
C:\Users\<username>\AppData\Local\Temp\HBCD\recup_dir.1\f0616152.exe File name: f0616152.exe
Size: 182.27 KB (182272 bytes)
MD5: 4f72ed9691c8678493fa27fd7bf58c26
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\HBCD\recup_dir.1\f0616152.exe
Group: Malware file
Last Updated: January 11, 2023
%WINDIR%\system32\arking.exe File name: arking.exe
Size: 184.83 KB (184832 bytes)
MD5: 173947129cb9265d2246221b48d9a6c1
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 12, 2011
%WINDIR%\system32\arking.exe File name: arking.exe
Size: 187.39 KB (187392 bytes)
MD5: 4882b3229cd7195a2145984f45c345c0
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 9, 2011
%TEMP%\olhrwef.exe File name: olhrwef.exe
Size: 107.69 KB (107692 bytes)
MD5: dcef55fbe9f582bf969d103f3d82f370
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: January 23, 2013
%WINDIR%\system32\amvo.exe File name: amvo.exe
Size: 116.22 KB (116229 bytes)
MD5: 7733e4c9c3dec060030646663f3d7c24
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 1, 2010
D:\l61yyp.exe File name: l61yyp.exe
Size: 114.92 KB (114924 bytes)
MD5: 90df1a4489670e3b36c368b7822f5338
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: D:\l61yyp.exe
Group: Malware file
Last Updated: August 17, 2022
%WINDIR%\system32\olhrwef.exe File name: olhrwef.exe
Size: 105.23 KB (105236 bytes)
MD5: 7112746b97fe64c040f51570fa416aa4
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 3, 2019
%WINDIR%\system32\kva8wr.exe File name: kva8wr.exe
Size: 174.85 KB (174855 bytes)
MD5: 24d214aa2dc94b0115154d79f093c809
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 28, 2013
%WINDIR%\system32\olhrwef.exe File name: olhrwef.exe
Size: 109.3 KB (109308 bytes)
MD5: 7d2cfc6cee08d6e2dd5d11e00df20414
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: February 23, 2011
C:\Windows\ConfigSetRoot\biriprg.exe File name: biriprg.exe
Size: 117.76 KB (117760 bytes)
MD5: 3bb0ce6249f50f9db051e5260cfa43aa
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows\ConfigSetRoot\biriprg.exe
Group: Malware file
Last Updated: April 11, 2022
%WINDIR%\system32\arking.exe File name: arking.exe
Size: 184.83 KB (184832 bytes)
MD5: 89225ad4e26a8c3a9e34afb4b83805af
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 6, 2011
%WINDIR%\system32\hgaaaa.exe File name: hgaaaa.exe
Size: 266.75 KB (266752 bytes)
MD5: 2fc487d825decef6eac9b442f7d6d737
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 4, 2011
%WINDIR%\system32\kamsoft.exe File name: kamsoft.exe
Size: 104.42 KB (104421 bytes)
MD5: 001d9df15b7567e917f0fbcf17ce0c63
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 16, 2013
%WINDIR%\system32\ahnsbsb.exe File name: ahnsbsb.exe
Size: 169.77 KB (169770 bytes)
MD5: 769def3d29f5fe9f6e3b965879100d0a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: July 1, 2011
%WINDIR%\system32\kva8wr.exe File name: kva8wr.exe
Size: 172.89 KB (172890 bytes)
MD5: 14eeeb12e5dd9fa05dfbe6aab18b0e89
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: February 21, 2011
%WINDIR%\system32\rttrwq.exe File name: rttrwq.exe
Size: 105 KB (105003 bytes)
MD5: 36e7d4735c888cd24e1732c1a499910d
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 7, 2011
C:\System Volume Information\_restore{66417A6E-C993-46E2-B0B9-F22CAE1AE3A1}\RP42\A0004425.exe File name: A0004425.exe
Size: 107.04 KB (107045 bytes)
MD5: 97893d7c4984cc1b6e41c4ef598bb9d6
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{66417A6E-C993-46E2-B0B9-F22CAE1AE3A1}\RP42\A0004425.exe
Group: Malware file
Last Updated: November 23, 2021
%WINDIR%\system32\kamsoft.exe File name: kamsoft.exe
Size: 105.09 KB (105097 bytes)
MD5: 451f18694bbc49150683fe7b2bac5322
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 16, 2013

More files
Loading...