MSIL/GameTool.CY potentially unsafe removal instruction

The MSIL/GameTool.CY potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameTool.CY potentially unsafe virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MSIL/GameTool.CY potentially unsafe?


File Info:
name: AFF5E6A6495C00AA3E5B.mlw
path: /opt/CAPEv2/storage/binaries/26ae4dbb6fcdbd89cf79cb5f2786a6004be581fa531fb5e44ac09900e479c996
crc32: 59B700F9
md5: aff5e6a6495c00aa3e5bddefe5a38db9
sha1: 9017accbad332d16a8052087f64678657d175e64
sha256: 26ae4dbb6fcdbd89cf79cb5f2786a6004be581fa531fb5e44ac09900e479c996
sha512: 1f774bdfb6c2b282ce9f45ba207e12f3afab49e5f1b2033811d45fe5b28af9b3f6b222bb18bc8969a9d80c77633467f02bde06f35af24a58a443a4cebdd57fc6
ssdeep: 12288:Wiw5LrkzMklOXh35cBdM7uesaie9/hc7F8bjERCG2sg7B6ev1G/H:Wiw5o4CBy7bIGKSgMd6ev8/H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F7F4EF872948492BC5784236D27F8F62C760CDAC9615441ABFBA7EDAFA3BF4E5403103
sha3_384: b72c1f8056897a6bbbc48d04f2b81ba1d094261494c4f4f80c2779e9e44ee68cb1c42301d81f73e3868cb4db5c98a8b9
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-08-14 12:15:07

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Enne
FileDescription: Enne launcher
FileVersion: 1.0.0.0
InternalName: Patcher.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Patcher.exe
ProductName: Patcher
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GameTool.CY potentially unsafe also known as:

Bkav	W32.Common.BFD36672
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.68717098
FireEye	Trojan.GenericKD.68717098
ALYac	Trojan.GenericKD.68717098
Cylance	unsafe
VIPRE	Trojan.GenericKD.68717098
Sangfor	Trojan.Win32.Gametool.Vwdl
K7AntiVirus	Unwanted-Program ( 0057f7dc1 )
K7GW	Unwanted-Program ( 0057f7dc1 )
Arcabit	Trojan.Generic.D4188A2A
Cyren	W32/Trojan.GHK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GameTool.CY potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.68717098
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.68717098 (B)
Zillya	Trojan.GameTool.Win32.3745
McAfee-GW-Edition	Artemis!Trojan
Antiy-AVL	RiskWare/MSIL.GameTool
GData	Trojan.GenericKD.68717098
Google	Detected
McAfee	Artemis!AFF5E6A6495C
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.1131085861
TrendMicro-HouseCall	TROJ_GEN.R023H09HJ23
MaxSecure	Trojan.Malware.216107182.susgen
Fortinet	Adware/GameTool
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove MSIL/GameTool.CY potentially unsafe?

MSIL/GameTool.CY potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X