MSIL/GameHack.ML potentially unsafe removal instruction

The MSIL/GameHack.ML potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameHack.ML potentially unsafe virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/GameHack.ML potentially unsafe?


File Info:
name: 49DFE89AF1FD19D41916.mlw
path: /opt/CAPEv2/storage/binaries/02c9dceac6edfefa164d298423ce5033b3270c227a1591ee200f92163d7500b7
crc32: AA4A3640
md5: 49dfe89af1fd19d419169883b6c93a32
sha1: e953109ada969d6ba8b1e06cd693eaa6d58eda45
sha256: 02c9dceac6edfefa164d298423ce5033b3270c227a1591ee200f92163d7500b7
sha512: 065258b85b7656f50f0a664b0eee69104167c9eb354fb4581321a26ab57cf6c92213457162bf4f3dadb6aa09c19d7e8b68191d0fc81dc9336e7cefd57d861924
ssdeep: 6144:CHSIFOHkspK7Pd4LTeAaxa2KszOmmCbMHY2Pr4wD+XPecDKNv9z:CHSIYppUPdmT0qLmmCb8Y2Pr4wD+XPe3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B054929C362072DFC857E4B29AA82C64EB606C7B531F8213A02375EDDA1D997DF140F6
sha3_384: 0fb666cf94014f7d3c1f9051f38d68b5e281178d79c53531d87f4936451c34f0051adcef1eb1f52f208d8fdc99533091
ep_bytes: ff250020400000000000000000000000
timestamp: 2015-05-27 06:41:05

Version Info:
Translation: 0x0000 0x04b0
FileDescription: СDРаtcher
FileVersion: 2.2.0.0
InternalName: CDPatcher.exe
LegalCopyright: Copyright © 2014
OriginalFilename: CDPatcher.exe
ProductName: СDРаtcher
ProductVersion: 2.2.0.0
Assembly Version: 2.2.5625.15632

MSIL/GameHack.ML potentially unsafe also known as:

Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.49dfe89af1fd19d4
McAfee	Artemis!49DFE89AF1FD
Cylance	Unsafe
K7AntiVirus	Unwanted-Program ( 00568e2f1 )
K7GW	Unwanted-Program ( 00568e2f1 )
Cybereason	malicious.ada969
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GameHack.ML potentially unsafe
Kaspersky	UDS:DangerousObject.Multi.Generic
Avast	Win32:Malware-gen
Comodo	Malware@#20g4s70ovz9pn
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
APEX	Malicious
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Ikarus	Trojan.SuspectCRC
Rising	Trojan.Generic/MSIL@AI.97 (RDM.MSIL:81iUC2V6NnNKLbWunm5Wkg)
SentinelOne	Static AI – Suspicious PE
Fortinet	Adware/GameHack
AVG	Win32:Malware-gen
Panda	Trj/CI.A

How to remove MSIL/GameHack.ML potentially unsafe?

MSIL/GameHack.ML potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X