Win32/GameTool.GU potentially unsafe removal instruction

The Win32/GameTool.GU potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/GameTool.GU potentially unsafe virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/GameTool.GU potentially unsafe?


File Info:
name: B0000C62E784FAFE2D6F.mlw
path: /opt/CAPEv2/storage/binaries/7313bede347a7eb4faba66f2f38c9591ca82168bf89cdae66f5d24395a03a2e6
crc32: 848388E0
md5: b0000c62e784fafe2d6f594fbf3b4c0e
sha1: 00d4a97f803056ea066dc8222d7b5d21e570ab79
sha256: 7313bede347a7eb4faba66f2f38c9591ca82168bf89cdae66f5d24395a03a2e6
sha512: ab3b7e215aa95a53db1cef1c25c49dab14f6b02a6adf981162d235343454d83429980d87b02bb14bb773e6f514d3f2126e5bc9f5bb2f234a5f8873d9af193c37
ssdeep: 1536:aUEtXr0hFBKexYTMUD9dRqTjG/0OxkkV1gx+7iBkO6ESmooNmIaS:a/tbwFRY0w0iZV1O+7iBZpSmooNmI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T112938D0135A384B3F4EBC13104D1BF68EBEC7E629E699D8787041E459CB08E16D2B2DB
sha3_384: a1ceb17b630f7601d43afa501f1a27903473d7845153a0688dee400289dfa25d51721b5af6c3a19d052003fa7b4b2502
ep_bytes: 558bec6aff6840f2400168dc7d400164
timestamp: 2008-10-22 04:43:06

Version Info:
CompanyName: Valve
FileDescription: Half-Life Launcher
FileVersion: 1, 1, 1, 1
InternalName: Half-Life Launcher
LegalCopyright: Copyright (c) 1996-2003
LegalTrademarks: 
OriginalFilename: hl.exe
ProductName: Steam Half-Life Launcher
ProductVersion: 1, 1, 1, 1
Translation: 0x0409 0x04b0

Win32/GameTool.GU potentially unsafe also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.GameTool.4!c
Skyhigh	BehavesLike.Win32.Autorun.mm
McAfee	Artemis!B0000C62E784
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Trojan.Win32.Gametool.Vyoy
ESET-NOD32	a variant of Win32/GameTool.GU potentially unsafe
Avast	Win32:WrongInf-A [Susp]
Ikarus	PUA.GameTool
Kingsoft	malware.kb.a.972
Cylance	unsafe
Rising	Trojan.Generic@AI.95 (RDML:spQKCBmNG1qW3YZoupnFtQ)
Fortinet	Riskware/GameTool
AVG	Win32:WrongInf-A [Susp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Win32/GameTool.GU potentially unsafe?

Win32/GameTool.GU potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X