Crack

Win32/GameHack.BZY potentially unsafe (file analysis)

Malware Removal

The Win32/GameHack.BZY potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GameHack.BZY potentially unsafe virus can do?

  • Network anomalies occured during the analysis.
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Generates some ICMP traffic
  • Uses suspicious command line tools or Windows utilities

How to determine Win32/GameHack.BZY potentially unsafe?


File Info:

crc32: AB68E4E3
md5: 1b2ba0777d2ea36e29e26557b4c90db8
name: csgo_v112b1.exe
sha1: e982c850d090e9e9b83f718240638fb06f686e55
sha256: 5534ecff613e70a989906b8c0a5cf4fad5be597294dfb5c306e5f66a087519f1
sha512: d34f02a1bfb8a339cef72ef2ba090355cee396c9c1241d5fb4743b2fa0eaac550074f94d99fae37e0e036ecdde11d9d010f485be53a55e83f7b4977de23590b7
ssdeep: 98304:ItT2Iq+mWktqdh7PqOcAziJyHbQnSCSFF1mCKMGE/a/tO1rJOZH:Qq+mWktqdh7PqOcAziJyHbGSCSFF1m7
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/GameHack.BZY potentially unsafe also known as:

DrWebTrojan.MulDrop11.47924
MicroWorld-eScanTrojan.GenericKD.33383665
McAfeeArtemis!1B2BA0777D2E
CylanceUnsafe
SangforMalware
K7AntiVirusUnwanted-Program ( 005261181 )
BitDefenderTrojan.GenericKD.33383665
K7GWUnwanted-Program ( 005261181 )
TrendMicroTROJ_GEN.R015C0WBT20
BitDefenderThetaGen:NN.ZexaF.34096.cxW@ayFggRbi
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.GenericKD.33383665
KasperskyTrojan.Win32.SelfDel.hmqw
AlibabaTrojan:Win32/SelfDel.09f39f60
NANO-AntivirusTrojan.Win32.SelfDel.hcoqsj
AegisLabTrojan.Multi.Generic.4!c
TencentWin32.Trojan.Selfdel.Dxxb
Endgamemalicious (high confidence)
SophosGeneric PUA OJ (PUA)
F-SecureTrojan.TR/SelfDel.frmyj
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.wc
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.33383665 (B)
CyrenW32/Trojan.XHMY-1084
AviraTR/SelfDel.frmyj
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Generic.D1FD64F1
ZoneAlarmTrojan.Win32.SelfDel.hmqw
Acronissuspicious
VBA32Trojan.Wacatac
ALYacTrojan.GenericKD.33383665
MAXmalware (ai score=89)
Ad-AwareTrojan.GenericKD.33383665
ESET-NOD32a variant of Win32/GameHack.BZY potentially unsafe
TrendMicro-HouseCallTROJ_GEN.R015C0WBT20
RisingTrojan.SelfDel!8.275 (CLOUD)
eGambitUnsafe.AI_Score_99%
FortinetRiskware/GameHack
Qihoo-360Generic/Trojan.5db
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Win32/GameHack.BZY potentially unsafe?

Win32/GameHack.BZY potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment