Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/Chip.E

Aliases:Trojan-GameThief.Win32.Tibia.ekh (Kaspersky), Trojan:Win32/Malex.gen!F (Microsoft), PWS-Tibia.gen.d trojan (McAfee) 
Type of infiltration:Trojan  
Size:30208 B 
Affected platforms:Microsoft Windows 
Signature database version:4628 (20091122) 

Short description

Win32/Chip.E is a trojan that steals passwords and other sensitive information. The trojan can send the information to a remote machine.

Installation

When executed, the trojan copies itself into the following location:
  • %startup%lsass.exe
This causes the trojan to be executed on every system start.

Information stealing

Win32/Chip.E is a trojan that steals account names and passwords for the following online games:
  • Tibia
The trojan contains a list of (1) URLs. The trojan can send the information to a remote machine. The HTTP protocol is used.

Other information

If it succeeds, the trojan removes itself from the computer.