MSIL/GameTool.U potentially unsafe removal

The MSIL/GameTool.U potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/GameTool.U potentially unsafe virus can do?

• CAPE extracted potentially suspicious content
• .NET file is packed/obfuscated with Confuser
• Authenticode signature is invalid
• Binary file triggered YARA rule

How to determine MSIL/GameTool.U potentially unsafe?

File Info:
name: A81A4A848016BF253EF0.mlw
path: /opt/CAPEv2/storage/binaries/cf4e37283543ad5a1415db58a32f9c76e94a1a0d969ff46724d7e5116c015c6f
crc32: 1F647F75
md5: a81a4a848016bf253ef0af94ba1f808d
sha1: 5121d7b80cf9a7c9a1efe6a6d9dc43cbacd1a91b
sha256: cf4e37283543ad5a1415db58a32f9c76e94a1a0d969ff46724d7e5116c015c6f
sha512: fad04232931876bd19d6bfef24f3a3de5de691394f486b114fcb4036d85c84fc648e98f3278973b7e40b92647bffae4e69c4521b28c04650bd325c6d38abc63c
ssdeep: 24576:Um0NfkCtmpASJYd3e3VHjS/nC2FUNDbLx0/S939ouSTW:UxSJUeA/nhUVToz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10295C59C32507A9FC42BCD7289A51C24EBA06477570FE207A85722ED9A0DB9BCF055F3
sha3_384: 13419ed8e5c4be6602d773e2359308c5ce578259e1cac2a4f55a206720d038f3c48d27aa7ec41662b342f64b69840c02
ep_bytes: ff250020400000000000000000000000
timestamp: 2015-12-21 23:54:48

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Application Automation, LLC
FileDescription: ClashBot
FileVersion: 7.9.2.1701
InternalName: Main.exe
LegalCopyright: Copyright © 2015
LegalTrademarks: 
OriginalFilename: Main.exe
ProductName: ClashBot
ProductVersion: 7.9.2.1701
Assembly Version: 7.9.2.1701

MSIL/GameTool.U potentially unsafe also known as:

How to remove MSIL/GameTool.U potentially unsafe?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.