Should I remove “MSIL/GameHack.BBR potentially unsafe”?

The MSIL/GameHack.BBR potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameHack.BBR potentially unsafe virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSIL/GameHack.BBR potentially unsafe?


File Info:
name: 4D2929494F5D3D337BF9.mlw
path: /opt/CAPEv2/storage/binaries/3e2a3ae9093ac97865f0333e3826553b696e2464542861040098e8d7e9213a7b
crc32: 068A40D4
md5: 4d2929494f5d3d337bf9005072e355d8
sha1: e67e68a14205ecbdf3c5d380708889c7c91a00c8
sha256: 3e2a3ae9093ac97865f0333e3826553b696e2464542861040098e8d7e9213a7b
sha512: d3c0c164d9f50a9be8a30b2e154c2bcd73bdc64c61b751ba3b1b4c7226db11c6d3e04f1db4aafe78339f092750305011a264505cd296dc00b154a0ca523cb75b
ssdeep: 1536:7Q06jLPVOAGaZd8UTmysb7mlMv9cDBSYVHti:78LNGaZd8RPb7mlMIYOti
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T174433A142EFF80A6F1FBAE759AE165D25BBAB2972B03E54D14D003C70A13E40DC9167E
sha3_384: 007ab544f0c3b65fa7a8bdaa672a3a1287f7154e393e13000fd7f3c88da23d408bf94de006a9c4dfa46fb1df9643e5ce
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-04 17:21:52

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: cshack.exe
LegalCopyright:  
OriginalFilename: cshack.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL/GameHack.BBR potentially unsafe also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Aqhrh.4!c
MicroWorld-eScan	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
FireEye	Generic.mg.4d2929494f5d3d33
ALYac	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
Cylance	Unsafe
Cybereason	malicious.94f5d3
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/GameHack.BBR potentially unsafe
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
Ad-Aware	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
Sophos	Generic PUA OG (PUA)
VIPRE	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Trojan.Heur.DNP.dm0@aqHRH@h (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.Heur.DNP.dm0@aqHRH@h
Arcabit	Trojan.Heur.DNP.E83A5F
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!4D2929494F5D
MAX	malware (ai score=83)
TrendMicro-HouseCall	TROJ_GEN.R03BH09G622
Rising	PUA.GameHack!8.223 (CLOUD)
Yandex	Riskware.Agent!qgH43aNupWQ
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
BitDefenderTheta	AI:Packer.B402255F1F
CrowdStrike	win/malicious_confidence_90% (W)

How to remove MSIL/GameHack.BBR potentially unsafe?

MSIL/GameHack.BBR potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X