Win32/GameHack.CBU potentially unsafe malicious file

The Win32/GameHack.CBU potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GameHack.CBU potentially unsafe virus can do?

Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Win32/GameHack.CBU potentially unsafe?


File Info:
crc32: EFF8205D
md5: fa6bace79b61846910e80fe416bd61ae
name: extrimhack_17.12.2018_.exe
sha1: 457d3f85dbb52eddf94cd6a814027f16b4daa1e6
sha256: 6e69ddb3192314964a8fb7c6f0412b7ad1e8a9ca114452adfda11f5d62c1094f
sha512: 85d4f344feeef2f491ef8ad626d40fc21f584db3118b887481bba93756089cb36f4dbe2538a1d2403573ffdb2651fb8f5f249743b395dcbdd8ae779c6583c25a
ssdeep: 24576:V4U6hHZETKmUqY/efNar92jLr3c0puJVUke:VgHZgKmXtfNar92jLr3c08TUke
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/GameHack.CBU potentially unsafe also known as:

Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
GData	Win32.Trojan.Agent.61TY46
Alibaba	HackTool:Win32/Generic.3441cb02
AegisLab	Trojan.Win32.Generic.4!c
Comodo	Malware@#2kdfpvq5r6yb1
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.fa6bace79b618469
Sophos	Generic PUA EF (PUA)
MaxSecure	Trojan.Malware.74017745.susgen
Avira	HEUR/AGEN.1116534
Antiy-AVL	GrayWare/Win32.Presenoker
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Malware/Win32.Generic.C2940083
Acronis	suspicious
McAfee	GenericRXGR-SM!FA6BACE79B61
VBA32	BScope.Trojan.Tiggre
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/GameHack.CBU potentially unsafe
Rising	Trojan.Fuerboos!8.EFC8 (CLOUD)
Yandex	Riskware.Agent!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/GameHack
BitDefenderTheta	Gen:NN.ZexaF.34122.YCW@auwv4wai
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Win32/GameHack.CBU potentially unsafe?

Win32/GameHack.CBU potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X