Win32/GameTool.DX potentially unsafe removal

The Win32/GameTool.DX potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GameTool.DX potentially unsafe virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/GameTool.DX potentially unsafe?


File Info:
name: 3A047855D9228C2845CA.mlw
path: /opt/CAPEv2/storage/binaries/df65a45c76a764de94be03a11dc99e2ec77dc374871061ddb5ea4925b593a706
crc32: 38C0A054
md5: 3a047855d9228c2845ca8fca2dd63156
sha1: dae0971f0fc9029a16f82e450c0fc13ded8e0dfc
sha256: df65a45c76a764de94be03a11dc99e2ec77dc374871061ddb5ea4925b593a706
sha512: 414b755ab72ee63443a40911398796bea7d1107de353d6d903307bb4ffe7d27e4a39f461d99fc9faa9dce3ff94c38025ee1534319514e180e3162c6916bef212
ssdeep: 12288:Aa2dPxqMcmPDwj9TNXx0mHKdBO2zhlF/o:32dpqWPoNhNHKS2z32
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EB155C00B7CAC1F3CEC7453D05EED65D962BA5861B111DD7E3AC0B0F8E547E2AA36289
sha3_384: 3ca9ffe1c4019afce26b9a52d2cccac5e26fe9f903a3e15efebd2be658658a37dffc5332fff156e5a5f80325d750a8ca
ep_bytes: e8646c0000e916feffff558bec83ec20
timestamp: 2011-07-01 06:42:28

Version Info:
0: [No Data]

Win32/GameTool.DX potentially unsafe also known as:

Lionic	Trojan.Win32.Swisyn.4!c
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.Infected.dh
McAfee	GenericRXEP-EN!3A047855D922
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	TrojanSpy:Win32/QQpass.f295bbbb
VirIT	Trojan.Win32.Generic.BPDV
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/GameTool.DX potentially unsafe
Cynet	Malicious (score: 100)
ClamAV	Win.Malware.Swisyn-9968222-0
NANO-Antivirus	Trojan.Win32.Swisyn.brkaxv
Avast	Win32:Trojan-gen
Rising	Trojan.Generic@AI.96 (RDMK:gH95ljhOMW5Rf7tS6va9pw)
TACHYON	Trojan/W32.Swisyn.934326
DrWeb	Trojan.PWS.Spy.18034
Zillya	Trojan.Swisyn.Win32.25260
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.3a047855d9228c28
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Swisyn
Jiangmin	Trojan/Swisyn.tpf
Webroot	W32.Trojan.Gen
Varist	W32/S-13cf9944!Eldorado
Antiy-AVL	RiskWare/Win32.GameTool
Microsoft	PWS:Win32/QQpass
Google	Detected
AhnLab-V3	Trojan/Win32.Swisyn.R50961
BitDefenderTheta	Gen:NN.ZexaF.36802.5qX@amJKnVci
VBA32	TrojanPSW.Spy
Malwarebytes	Generic.Malware.AI.DDS
Panda	Generic Malware
Tencent	Malware.Win32.Gencirc.10b33043
Yandex	Trojan.GenAsa!QC6iUdGpm8w
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.73455369.susgen
Fortinet	W32/Generic.AC.2300C8!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Adware.Win.Agent.d69c1a6f

How to remove Win32/GameTool.DX potentially unsafe?

Win32/GameTool.DX potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X