Crack

Win32/GameHack.CQM potentially unsafe removal tips

Malware Removal

The Win32/GameHack.CQM potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GameHack.CQM potentially unsafe virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Unconventionial language used in binary resources: Polish
  • Authenticode signature is invalid
  • Deletes its original binary from disk

How to determine Win32/GameHack.CQM potentially unsafe?


File Info:

name: FA50CE76A1ED84C0B458.mlw
path: /opt/CAPEv2/storage/binaries/5d6e0116b8dda9ef365c817aa231ae8583e3867d3b1cde812534c83cb7ff9f83
crc32: A98D231F
md5: fa50ce76a1ed84c0b458673c4697b7ab
sha1: 5a57aa417e9f072293bb25ef956d9f436b27ff7d
sha256: 5d6e0116b8dda9ef365c817aa231ae8583e3867d3b1cde812534c83cb7ff9f83
sha512: 510e2ab4f65fb54fd2ef73602f62871d22f8795d5c18a50d6e1d5338177c14e65779457d96ceeb33a49c8ac76d300cd852fa7ab584a89fae829fc56af6a13b9b
ssdeep: 12288:SC8O1CY/NRWXTfkOiWGRSNPQQi5fmyCVu8ouLRxj23oaBIQuSLtkzvv3JmY:zNEXgZWfPQQMepoKRg3PBIQMzX3JH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T130156B1161A1A161D3A81FB1AD792A8B09352CF4CBBCD1E723C0277C0ABF5F149E5B97
sha3_384: d1bf8494141b082e24bf41f02018bed6479086628a5a0313b6c401419d116fac94c98cb5a478fe066abeaad68182015b
ep_bytes: e83a050000e97afeffff558bec81ec24
timestamp: 2021-12-11 13:54:22

Version Info:

0: [No Data]

Win32/GameHack.CQM potentially unsafe also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.38292756
FireEyeTrojan.GenericKD.38292756
ALYacTrojan.GenericKD.38292756
CylanceUnsafe
SangforRiskware.Win32.Wacapew.C
K7AntiVirusUnwanted-Program ( 00548a1f1 )
K7GWUnwanted-Program ( 00548a1f1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.CQM potentially unsafe
TrendMicro-HouseCallTROJ_GEN.R01FC0PLN21
BitDefenderTrojan.GenericKD.38292756
AvastFileRepMalware
Ad-AwareTrojan.GenericKD.38292756
EmsisoftTrojan.GenericKD.38292756 (B)
ComodoApplicUnwnt@#2srfs0wn0zufs
TrendMicroTROJ_GEN.R01FC0PLN21
McAfee-GW-EditionRDN/Generic.dx
SophosGeneric PUA FK (PUA)
MAXmalware (ai score=84)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.38292756
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Malware-gen.R459174
McAfeeRDN/Generic.dx
MalwarebytesMalware.AI.3675429316
APEXMalicious
FortinetMalicious_Behavior.SB
AVGFileRepMalware
PandaTrj/GdSda.A

How to remove Win32/GameHack.CQM potentially unsafe?

Win32/GameHack.CQM potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment