MSIL/GameTool_AGen.X potentially unsafe removal instruction

The MSIL/GameTool_AGen.X potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/GameTool_AGen.X potentially unsafe virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/GameTool_AGen.X potentially unsafe?


File Info:
name: 4F942F994B2A67D292E9.mlw
path: /opt/CAPEv2/storage/binaries/67cf8cf57147fec303df44be33137c00d2812b1d41bd7a8fa2766c2ec27853b0
crc32: F0CF2CFD
md5: 4f942f994b2a67d292e915c6885ab8a5
sha1: bab27b98f29112e5c21b59f8a4d07abcbe114ba2
sha256: 67cf8cf57147fec303df44be33137c00d2812b1d41bd7a8fa2766c2ec27853b0
sha512: a1d98beacea26715bfbb1f2e5bcb450a601cf3000535ff85b6dc668dbb4577178db7338d3fce7d65e09783f1b612b393d579dcedb19f8c5fec9f7cbdb2a62f32
ssdeep: 49152:aTSAJ20uFBjFoNPX34Q9QTmrrcAfgVNLfCD9uAzWDe2GG8YntDn1s4xZucdJ:ayfQ3NQCcA+li9uK/G8QnjZucdJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F406E02B364DF414C33D8AFE662C8A4F9F147DC563EB9EC514A271A76A76A04C3E0748
sha3_384: ddfeded45f12c17c265a4cac0952ae5801427604ab137ea7101e5d3d4beacd61dbfb5c1c8321c9d7b667350572f6cd86
ep_bytes: ff250020400000000000000000000000
timestamp: 2038-10-14 00:47:49

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Stave Game Community Launcher
FileVersion: 1.0.0.0
InternalName: Stave Game Community Launcher.exe
LegalCopyright: Copyright © StaveGame By DuhaGemerz
LegalTrademarks: 
OriginalFilename: Stave Game Community Launcher.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/GameTool_AGen.X potentially unsafe also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.GameTool.4!c
AVG	Win32:Malware-gen
MicroWorld-eScan	Trojan.GenericKD.71755881
FireEye	Trojan.GenericKD.71755881
Skyhigh	GenericRXVQ-YA!4F942F994B2A
McAfee	GenericRXVQ-YA!4F942F994B2A
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Gametool.Ve2u
K7AntiVirus	Unwanted-Program ( 005966501 )
K7GW	Unwanted-Program ( 005966501 )
Cybereason	malicious.94b2a6
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/GameTool_AGen.X potentially unsafe
BitDefender	Trojan.GenericKD.71755881
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.71755881 (B)
VIPRE	Trojan.GenericKD.71755881
Sophos	Generic Reputation PUA (PUA)
Antiy-AVL	Trojan/Win32.Agent
Arcabit	Trojan.Generic.D446E869
ViRobot	Trojan.Win.Z.Agent.3813888
GData	Trojan.GenericKD.71755881
AhnLab-V3	Malware/Win.YA.C5593243
ALYac	Trojan.GenericKD.71755881
MAX	malware (ai score=83)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06BO24
Rising	PUA.GameTool!8.148 (CLOUD)
Ikarus	PUA.MSIL.Gametool
MaxSecure	Trojan.Malware.234509827.susgen
Fortinet	Adware/GameTool_AGen
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_60% (D)

How to remove MSIL/GameTool_AGen.X potentially unsafe?

MSIL/GameTool_AGen.X potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X