Win32/GameHack.ES potentially unsafe removal guide

The Win32/GameHack.ES potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/GameHack.ES potentially unsafe virus can do?

Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/GameHack.ES potentially unsafe?


File Info:
crc32: 0F77AE51
md5: e3782f0f873fc4c078c23440018efd20
name: E3782F0F873FC4C078C23440018EFD20.mlw
sha1: 4629c7df232f614c9d21f84e214a2ed33a12dd71
sha256: 1aa195e6ee55094b9db139cc47e30c99c94b0615523ffeb2d5b56cdbbfe616c3
sha512: 969ef615858a3db4a1e71d6539b56f863c31db2751bec269a46df2c28c3e616138fbe813b4870f6151d8105b6ef3e629a87c2995feee154d0f91d620cd08dee2
ssdeep: 384:taP3E7Hh1GFNrEz3VHHsqxR8zJV63kIrCSl5ZytSq:taPU7H+4DVHtwn63k+Cm5
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:
LegalCopyright: SPYFAN
FileDescription: 
FileVersion: 1,0,0,0
CompanyName: gta-action.com
Translation: 0x0000 0x0000

Win32/GameHack.ES potentially unsafe also known as:

K7AntiVirus	Unwanted-Program ( 004bce101 )
ClamAV	Win.Malware.Killwin-7104182-0
CAT-QuickHeal	Trojan.GenericPMF.S1625602
Cylance	Unsafe
Sangfor	Trojan.Script.Phonzy.A
K7GW	Unwanted-Program ( 004bce101 )
Cybereason	malicious.f232f6
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/GameHack.ES potentially unsafe
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
Cynet	Malicious (score: 100)
NANO-Antivirus	Trojan.Win32.Qhost.ckprvw
Tencent	Malware.Win32.Gencirc.10b3d552
Sophos	Generic PUA EG (PUA)
Comodo	TrojWare.Win32.TrojanDropper.Agent.~ZCA@go3n
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.mc
FireEye	Generic.mg.e3782f0f873fc4c0
Antiy-AVL	Trojan/Generic.ASMalwS.1B8DD6
Kingsoft	Heur.SSC.2626987.1216.(kcloud)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Win32.Application.Agent.LAGLJL
McAfee	Artemis!E3782F0F873F
Rising	Trojan.Win32.Agent.a (CLASSIC)
Yandex	Trojan.GenAsa!Q+O4UmmrDn8
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/KillWin.BQ!tr
AVG	Win32:Evo-gen [Susp]
Paloalto	generic.ml

How to remove Win32/GameHack.ES potentially unsafe?

Win32/GameHack.ES potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/GameHack.ES potentially unsafe removal guide