Crack

Win32/GameHack_AGen.R potentially unsafe removal tips

Malware Removal

The Win32/GameHack_AGen.R potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/GameHack_AGen.R potentially unsafe virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Win32/GameHack_AGen.R potentially unsafe?


File Info:

name: F156A6A4A21ED34E01C8.mlw
path: /opt/CAPEv2/storage/binaries/6756e3435e93c641e374f94a6f8241f02e5df99d4179657bae77d18491b95c3a
crc32: E1550D54
md5: f156a6a4a21ed34e01c82a3378300b06
sha1: 3a8239fe14be427d6155c233ba1af113572de5db
sha256: 6756e3435e93c641e374f94a6f8241f02e5df99d4179657bae77d18491b95c3a
sha512: 887c85044fb228b01b7a11fddff6038fbf0271847b01e28917dc9ead32db080359a0ceead82e35b6d62ef2912c5dc84abbc489c95074a251589065cf51ba49e1
ssdeep: 49152:7yg40Tw9hVZcnfDUxWMA1Z/KTM2SLic8HUAVx/KlYHiyrPgvpHfXo:7yg4wocn7iA1Ma8HVVgbf4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14FF52303738CEF85E546B4FD02A8B2A85B658E9A4847570142F4FF8BB974E43ED1D48E
sha3_384: 79e1b980ed774ad993e12141908b30999e44275b3229974f51da41bd8237cccb1031abc1b273d63927c165bc23ee7b0b
ep_bytes: 60be00102e018dbe000012ffc78738a1
timestamp: 2018-09-06 18:04:59

Version Info:

0: [No Data]

Win32/GameHack_AGen.R potentially unsafe also known as:

McAfeeArtemis!F156A6A4A21E
CylanceUnsafe
SangforPUP.Win32.Presenoker.mt
ESET-NOD32a variant of Win32/GameHack_AGen.R potentially unsafe
Paloaltogeneric.ml
ComodoMalware@#2957flc9gatry
McAfee-GW-EditionBehavesLike.Win32.BadFile.wc
SentinelOneStatic AI – Suspicious PE
SophosGeneric PUA DK (PUA)
IkarusTrojan-Spy.Agent
AviraHEUR/AGEN.1139753
MicrosoftPUA:Win32/Presenoker
CynetMalicious (score: 99)
VBA32BScope.Trojan.Wacatac

How to remove Win32/GameHack_AGen.R potentially unsafe?

Win32/GameHack_AGen.R potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment