We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
PWS:WinNT/OnLineGames.E
Aliases: Win-Trojan/Rootkit.38144.B (AhnLab) Trojan horse Hider.QPN (AVG) TR/Rootkit.Gen (Avira) Trojan.NtRootKit.13335 (Dr.Web) Win32/PSW.OnLineGames.PZJ trojan (ESET) RootKit.Win32.KillAV.aq (Rising AV)
Summary
PWS:WinNT/OnLineGames.E is the rootkit component of the PWS:Win32/OnlineGames family. Its role is to hide certain files and registry keys to prevent removal from your computer.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
While PWS:WinNT/OnLineGames.E may be the rootkit component, the Win32/OnLineGames family is known to steal user credentials for online games. We recommend that you change your passwords if you play online games that require a user name and password.
