English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-GameThief.Win32.Nilage.by

Detected Mar 11 2005 14:09 GMT
Released Mar 11 2005 14:09 GMT
Published Jun 10 2005 11:34 GMT

Technical Details

This program is written in Delphi, and not packed at all. It is a DLL file approximately 120KB in size.

It is unable to auto-install, and therefore requires a special installation program.

It functions as a key logger.

It will search the victim machine either for a window titled 'Lineage Windows Client' or Internet Explorer with a window open to any page of the gamania.com server. Keystrokes entered in these windows will be recorded in a file named c:\gamest1.txt. This file will include saved passwords. The file will then be sent, together with other information such as IP-address, to the remote malicious user.


Bookmark and Share
Share
Trojan-GameThief

This type of malicious program is designed to steal user account information for online games. The data is then transmitted to the malicious user controlling the Trojan. Email, FTP, the web (including data in a request), or other methods may be used to transit the stolen data.


Other versions

Aliases

Trojan-GameThief.Win32.Nilage.by (Kaspersky Lab) is also known as:

  • Trojan-PSW.Win32.Nilage.by (Kaspersky Lab)
  • Trojan-PSW.Win32.Lineage.by (Kaspersky Lab)
  • Trojan-Spy.Win32.Lineage.by (Kaspersky Lab)
  • Trojan: PWS-Lineage.dll (McAfee)
  • Troj/Lineage-EJ (Sophos)
  • Trojan.Spy.Lineage-10 (ClamAV)
  • Trj/Lineage.AZ (Panda)
  • W32/Lineage.BE@pws (FPROT)
  • PWS:Win32/Lineage (MS(OneCare))
  • Trojan.PWS.Lineage (DrWeb)
  • Win32/PSW.Lineage trojan (Nod32)
  • Generic.Lineage.23A30D0D (BitDef7)
  • Trojan.PWS.Nilage.Gen.3 (VirusBuster)
  • Win32:QQPass-X [Trj] (AVAST)
  • Trojan-PWS.Win32.Delf (Ikarus)
  • Collected.4.BQ (AVG)
  • TR/PSW.Lineage.hq (AVIRA)
  • Infostealer (NAV)
  • W32/Lineage.ZB (Norman)
  • PWS-Lineage.dll (NAI)
  • TSPY_LINEAGE.Q (PCCIL)
  • Trojan.PSW.Lineage.GEN (Rising)
  • Trojan-GameThief.Win32.Nilage.by [AVP] (FSecure)
  • TSPY_LINEAGE.Q (TrendMicro)