Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/PSW.OnLineGames.OTO

Aliases:Trojan-GameThief.Win32.WOW.xiz (Kaspersky), PWS:Win32/Lolyda.AU (Microsoft), PWS-OnlineGames.ho trojan (McAfee) 
Type of infiltration:Trojan  
Size:27676 B 
Affected platforms:Microsoft Windows 
Signature database version:4891 (20100223) 

Short description

Win32/PSW.OnLineGames.OTO is a trojan that installs Win32/PSW.OnLineGames.OTQ malware.

Installation

When executed, the trojan creates the following files:
  • %windir%system32t329148.ini (2616 B)
  • %temp%~~%variable%.~~~ (626692 B, Win32/PSW.OnLineGames.OTQ)
A string with variable content is used instead of %variable%.

Other information

The trojan executes the following command:
  • cmd.exe /c %system%regsvr32.exe /s %temp%~~%variable%.~~~