Threat Search: 

ThreatExpert's Statistics for Trojan-GameThief.Win32.WOW [Ikarus]:

Trojan-GameThief.Win32.WOW [Ikarus] is also known as:
Threat AliasNumber of Incidents
Infostealer.Gampass [Symantec]7,489
Mal/EncPk-EW [Sophos]4,464
Trojan-Spy.Gampass!sd6 [PC Tools]3,152
PWS-Gamania.dll [McAfee]2,658
Mal/WOWPWS-B [Sophos]2,018
PWS-OnlineGames.ei [McAfee]1,778
Mal/Gampass-B [Sophos]1,765
Trojan-GameThief.Win32.WOW.gxi [Kaspersky Lab]1,521
Trojan-GameThief.Win32.WOW.gyq [Kaspersky Lab]1,406
Mal/Inet-Fam [Sophos]798
Trojan-GameThief.Win32.WOW.lrq [Kaspersky Lab]785
PWS-Mmorpg!f [McAfee]583
Trojan-GameThief.Win32.WOW.lqt [Kaspersky Lab]488
Trojan-GameThief.Win32.OnLineGames.uxad [Kaspersky Lab]484
Trojan Horse [Symantec]456
Trojan-GameThief.Win32.WOW.lrp [Kaspersky Lab]440
Win-Trojan/OnlineGameHack.26336.D [AhnLab]420
Win-Trojan/WowHack.16936.C [AhnLab]420
Trojan-GameThief.Win32.WOW.ltj [Kaspersky Lab]418
PWS-Mmorpg!h [McAfee]382
Infostealer.Onlinegame [Symantec]358
Win-Trojan/WowHack.14888 [AhnLab]350
Win-Trojan/WowHack.25640 [AhnLab]333
Win-Trojan/WowHack.19168 [AhnLab]260
PWS:Win32/OnLineGames.AJ [Microsoft]242
Trojan-GameThief.Win32.XiaJian.cl [Kaspersky Lab]225
Win-Trojan/Xiajian.17448.B [AhnLab]218
Win-Trojan/WowHack.15912.B [AhnLab]200
Win-Trojan/Xema.variant [AhnLab]199
Mal/Generic-A [Sophos]198
Trojan-GameThief.Win32.WOW.fjo [Kaspersky Lab]179
PWS:Win32/Deeneph.D [Microsoft]169
Generic PWS.y!n [McAfee]166
PWS:Win32/Dozmot.B [Microsoft]157
Win-Trojan/OnlineGameHack.19704.F [AhnLab]156
PWS:Win32/Dozmot.A [Microsoft]140
Trojan-GameThief.Win32.WOW.fre [Kaspersky Lab]132
PWS:Win32/Frethog.MO [Microsoft]123
Trojan-GameThief.Win32.WOW.frl [Kaspersky Lab]121
Trojan-Downloader.Win32.Agent.bifj [Kaspersky Lab]117
Trojan-GameThief.Win32.OnLineGames.urth [Kaspersky Lab]116
PWS-OnlineGames.e [McAfee]115
Mal/TibsPk-A [Sophos]114
PWS:Win32/Frethog.MP [Microsoft]89
Mal/LineDLL-B [Sophos]84
PWS-WoW.gen.i [McAfee]84
Trojan-GameThief.Win32.OnLineGames.blxm [Kaspersky Lab]81
Trojan-GameThief.Win32.OnLineGames.uukx [Kaspersky Lab]80
Generic PWS.ak [McAfee]70
Trojan-Dropper.Win32.Agent.anjj [Kaspersky Lab]66
W32.Gammima.AG [Symantec]66
Win-Trojan/OnlineGameHack.16632.B [AhnLab]66
Trojan-GameThief.Win32.OnLineGames.usqa [Kaspersky Lab]64
Trojan-GameThief.Win32.WOW.ony [Kaspersky Lab]64
Win-Trojan/WowHack.15400.D [AhnLab]64
Trojan-GameThief.Win32.WOW.hmv [Kaspersky Lab]63
Win-Trojan/Agent.20520 [AhnLab]62
Trojan-GameThief.Win32.WOW.ljs [Kaspersky Lab]57
Trojan-GameThief.Win32.XiaJian.aj [Kaspersky Lab]57
Trojan.Win32.Agent.btgg [Kaspersky Lab]56
Trojan-GameThief.Win32.OnLineGames.bmbe [Kaspersky Lab]56
Trojan-GameThief.Win32.OnLineGames.uwtw [Kaspersky Lab]56
Trojan-GameThief.Win32.WOW.igc [Kaspersky Lab]56
Mal/TibsPk-A, Mal/Dropper-O [Sophos]55
Win-Trojan/OnlineGameHack.18472.M [AhnLab]55
Win-Trojan/OnlineGameHack.26336.C [AhnLab]54
PWS:Win32/OnLineGames.BY [Microsoft]53
Generic PWS.bd [McAfee]50
PWS:Win32/Wowsteal.AL [Microsoft]50
Trojan-GameThief.Win32.WOW.ihl [Kaspersky Lab]50
Win-Trojan/OnlineGameHack.18472.N [AhnLab]50
Trojan-GameThief.Win32.WOW.ljk [Kaspersky Lab]49
Trojan-GameThief.Win32.WOW.off [Kaspersky Lab]49
Win-Trojan/OnlineGameHack.17920.GX [AhnLab]49
Infostealer [Symantec]48
Troj/Virtum-Gen [Sophos]48
Win-Trojan/OnlineGameHack.18472.U [AhnLab]48
Generic PWS.y [McAfee]45
PWS:Win32/Frethog.MN [Microsoft]44
Trojan-GameThief.Win32.WOW.dgt [Kaspersky Lab]44
Trojan-GameThief.Win32.WOW.eqj [Kaspersky Lab]42
Trojan-GameThief.Win32.WOW.fxi [Kaspersky Lab]42
Trojan-GameThief.Win32.WOW.lro [Kaspersky Lab]42
Win-Trojan/OnlineGameHack.12840.C [AhnLab]41
PWS:Win32/Frethog.gen!B [Microsoft]40
TrojanClicker:Win32/Lopin [Microsoft]40
Trojan-Spy [Ikarus]40
Win-Trojan/WowHack.14072.E [AhnLab]38
Mal/Behav-170 [Sophos]35
Dropper/OnlineGameHack.19704 [AhnLab]33
Trojan-GameThief.Win32.WOW.foj [Kaspersky Lab]33
Mal/Packer, Mal/EncPk-F [Sophos]32
Trojan-GameThief.Win32.WOW.gfj [Kaspersky Lab]30
Trojan-GameThief.Win32.WOW.mea [Kaspersky Lab]30
Trojan-GameThief.Win32.WOW.meb [Kaspersky Lab]30
Mal/Behav-112 [Sophos]28
Win-Trojan/WowHack.22776.D [AhnLab]28
Win-Trojan/WowHack.18984.S [AhnLab]27
Win-Trojan/WowHack.24112 [AhnLab]27
PWS-Mmorpg.gen [McAfee]26

Trojan-GameThief.Win32.WOW [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
China4,780
Russian Federation2
United Kingdom2

Trojan-GameThief.Win32.WOW [Ikarus] is known to be created as:
%CommonPrograms%\chkdisk.exe
%FontsDir%\b4b147bc522828731f1a016bfa72c073\system\ctfmn.exe
%ProgramFiles%\common files\remote\lsass.exe
%ProgramFiles%\thunmail\testabd.dll
%ProgramFiles%\thunmail\testabd.exe
%ProgramFiles%\waigua\dxwg.exe
%System%\090514-1-3.exe
%System%\090520-5-2.exe
%System%\090520-6-0.exe
%System%\090520-a-4.exe
%System%\1.exe
%System%\12days.dll
%System%\2008104426.dll
%System%\2008104428.dll
%System%\200921149.dll
%System%\200924358.dll
%System%\200925826.dll
%System%\20092634.dll
%System%\200931454.dll
%System%\20093300.dll
%System%\200934212.dll
%System%\200934245.dll
%System%\200934310.dll
%System%\2009347.dll
%System%\20093474.dll
%System%\200934829.dll
%System%\20093534.dll
%System%\200935727.dll
%System%\20093841.dll
%System%\200942353.dll
%System%\200943647.dll
%System%\200992136.dll
%System%\2883282542.dll
%System%\288359246.dll
%System%\2883592957.dll
%System%\288453514124l.dll
%System%\2898906726l.dll
%System%\3086872928.dll
%System%\3087342956.dll
%System%\3088283042.dll
%System%\30889048.dll
%System%\308968251wowg.dll
%System%\309093439.dll
%System%\3096092424.dll
%System%\3101872929.dll
%System%\3110312336.dll
%System%\36984349.dll
%System%\369968440.dll
%System%\888888.exe
%System%\adminlp.dll
%System%\alxres061230.exe
%System%\der2129193.dll
%System%\der4529721.dll
%System%\der5059774.dll
%System%\der5629905.dll
%System%\der6219244.dll
%System%\der6419968.dll
%System%\der815961.dll
%System%\der828931.dll
%System%\der919907.dll
%System%\ffo30887546.dll
%System%\ffo3112340.dll
%System%\fgjk4wvb.dll
%System%\fsmgmt.dll
%System%\gasretyw0.dll
%System%\gasretyw1.dll
%System%\gasretyw2.dll
%System%\kav320.dll
%System%\kav321.dll
%System%\kdexe.exe
%System%\kernel32.exe
%System%\l2.exe
%System%\l4.exe
%System%\malware\malware\48cb8dd.dll
%System%\malware\malware\52dc22c.dll
%System%\malware\malware\595b6e7.dll
%System%\malware\malware\5b3d359.dll
%System%\malware\malware\849c0f2.exe
%System%\malware\malware\8d85763.exe
%System%\malware\malware\a1617b7.dll
%System%\malware\malware\b6956c1.dll
%System%\malware\malware\db12357.exe
%System%\mossbor.exe
%System%\msexe.exe
%System%\msxm192z.dll
%System%\nmdfgds0.dll
%System%\nmdfgds1.dll
%System%\nmdfgds2.dll
%System%\rsmptec.dll
%System%\scrsys061230.scr
%System%\sgcq.dll
%System%\svchqs.exe
%System%\systemhper.dll
%System%\t329129.dll
%System%\w1nl0g0.exe
%System%\w1nlogo.exe
%System%\winsys32_061230.dll
%System%\winupdate\winupdate.exe
%System%\wow367_743.dll
%System%\wow374_636.dll
Notes:
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).