MSIL/Riskware.GameHack.Z removal instruction

The MSIL/Riskware.GameHack.Z is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Riskware.GameHack.Z virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Checks the CPU name from registry, possibly for anti-virtualization

How to determine MSIL/Riskware.GameHack.Z?


File Info:
crc32: BC981090
md5: 9d970d4987ff57a1c70a27af2e4fa135
name: 9D970D4987FF57A1C70A27AF2E4FA135.mlw
sha1: 7e5265a307c2b1a64d1f40f2bebb0a5dbba2c53b
sha256: 15a0a515892b093ff4cb423903de504d60f6bc67512933243ecccc1903cf2529
sha512: 7bed4e42352b62c204dc44aa77d05f5c6ef85af9c027df47aa2786b3f2309a4fbcf73213bad1518f4aed812a4054c1400b4ac442e068e76feda78505478eafdd
ssdeep: 6144:f5lBjataZnmxSl29RJaZqBtcDbye2zBE+BKE+D+Gfz5AwoL8sxOIhoaMiAqy5AO:hEknCztK1DTiwoL9tw5AOrKrIFODE
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright Blizzard xa9  2016
Assembly Version: 5.1.1.9
InternalName: launcher.exe
FileVersion: 5.1.1.9
CompanyName: Activision Blizzard
LegalTrademarks: 
Comments: 
ProductName: launcher
ProductVersion: 5.1.1.9
FileDescription: Battle NET lancher
OriginalFilename: launcher.exe

MSIL/Riskware.GameHack.Z also known as:

K7AntiVirus	Riskware ( 0050b1e11 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.30400191
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Riskware ( 0050b1e11 )
Cybereason	malicious.987ff5
Cyren	W32/S-0e9168d3!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.GameHack.Z
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Trojan.GenericKD.30400191
NANO-Antivirus	Trojan.Win32.Mlw.eyyrvq
MicroWorld-eScan	Trojan.GenericKD.30400191
Tencent	Msil.Risk.Riskware.Hwwl
Ad-Aware	Trojan.GenericKD.30400191
Sophos	Generic ML PUA (PUA)
Comodo	Application.MSIL.GameHack.Z@7kilc4
BitDefenderTheta	Gen:NN.ZemsilF.34170.Cm1@aeDt4Gp
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
FireEye	Generic.mg.9d970d4987ff57a1
Emsisoft	Trojan.GenericKD.30400191 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1128570
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.24EC1B9
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Trojan.GenericKD.30400191
AhnLab-V3	Unwanted/Win32.GameHack.R219092
Acronis	suspicious
McAfee	GenericRXCZ-DV!9D970D4987FF
MAX	malware (ai score=98)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.3635851226
Panda	Trj/GdSda.A
Ikarus	PUA.MSIL.Riskware
Fortinet	W32/Generic.Z!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/Riskware.GameHack.Z?

MSIL/Riskware.GameHack.Z removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X