Categories: Crack

MSIL/GameHack.ANH potentially unsafe removal tips

The MSIL/GameHack.ANH potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/GameHack.ANH potentially unsafe virus can do?

  • Dynamic (imported) function loading detected
  • .NET file is packed/obfuscated with Confuser
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine MSIL/GameHack.ANH potentially unsafe?


File Info:

name: 0FA293A59E4CFC9815B0.mlwpath: /opt/CAPEv2/storage/binaries/5c6821679291126786734f361bb46e1d0e00adf0d537bf336eeb63d3b1aaac12crc32: 6FB817C0md5: 0fa293a59e4cfc9815b03fcb75ac1260sha1: 20c40cfc4992e328fdd5d544c04818dd274fec28sha256: 5c6821679291126786734f361bb46e1d0e00adf0d537bf336eeb63d3b1aaac12sha512: 592257d997d0ad4b65dd50737a536b9dfbda518773c7451e9fa9dc7f0707a7d8abafee1e1b68c1f5aef2333fde1c2ea770a6ba1c9d753669751c8ca35e39aac4ssdeep: 49152:aI+2tcX0On2vOKSVDcROn2vOKSVDcOH26vkPcdcEY8KVxkEZiH:aI+2Ybn2viFzn2viFBW4FaEHEUtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T104E512E67736ED19CB284D7CE46ECDF465D87C418A70945B28E17C0B3DB261B8262F22sha3_384: 8700fd99a24b935441826fc842318f15109c93902cd35670758df2a411f086c137315a2bd37a4009e46b6aed6c4538dcep_bytes: ff250020400000000000000000000000timestamp: 2022-05-05 06:31:23

Version Info:

Translation: 0x0000 0x04b0FileDescription: FileVersion: 0.0.0.0InternalName: ___.netmodule.exeLegalCopyright: OriginalFilename: ___.netmodule.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

MSIL/GameHack.ANH potentially unsafe also known as:

Bkav W32.AIDetectNet.01
MicroWorld-eScan Trojan.GenericKD.50257069
FireEye Generic.mg.0fa293a59e4cfc98
ALYac Trojan.GenericKD.50257069
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Cybereason malicious.c4992e
Elastic malicious (moderate confidence)
ESET-NOD32 a variant of MSIL/GameHack.ANH potentially unsafe
Paloalto generic.ml
BitDefender Trojan.GenericKD.50257069
Ad-Aware Trojan.GenericKD.50257069
Emsisoft Trojan.GenericKD.50257069 (B)
Sophos Generic PUA CA (PUA)
GData Trojan.GenericKD.50257069
MAX malware (ai score=84)
Microsoft Backdoor:Win32/Bladabindi!ml
TrendMicro-HouseCall TROJ_GEN.R002H09E922
SentinelOne Static AI – Suspicious PE
Fortinet Adware/GameHack
BitDefenderTheta Gen:NN.ZemsilCO.34638.ip0@aSFzCXm
CrowdStrike win/malicious_confidence_70% (W)

How to remove MSIL/GameHack.ANH potentially unsafe?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Symmi.21812 (B) removal

The Symmi.21812 (B) is considered dangerous by lots of security experts. When this infection is…

37 seconds ago

How to remove “Trojan:Win32/AutoitInject.RE!MTB”?

The Trojan:Win32/AutoitInject.RE!MTB is considered dangerous by lots of security experts. When this infection is active,…

16 mins ago

Worm.VobfusVMF.S19740081 information

The Worm.VobfusVMF.S19740081 is considered dangerous by lots of security experts. When this infection is active,…

21 mins ago

Malware.AI.986323659 removal guide

The Malware.AI.986323659 is considered dangerous by lots of security experts. When this infection is active,…

33 mins ago

Generic.Dacic.1636.DB5B5110 removal

The Generic.Dacic.1636.DB5B5110 is considered dangerous by lots of security experts. When this infection is active,…

37 mins ago

Application.Application.Graftor.406603 (B) (file analysis)

The Application.Application.Graftor.406603 (B) is considered dangerous by lots of security experts. When this infection is…

47 mins ago