Win32/RiskWare.GameTool.P malicious file

The Win32/RiskWare.GameTool.P is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/RiskWare.GameTool.P virus can do?

A process attempted to delay the analysis task.
Starts servers listening on 127.0.0.1:9865
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system

Related domains:

ewt.dynu.net

gist.githubusercontent.com

data.wowtoken.info

How to determine Win32/RiskWare.GameTool.P?


File Info:
crc32: 8D0124AC
md5: 2d99c1aa6567efc9547b39bbd806918a
name: chrome.exe
sha1: 44c177034afba58a1e2f8040c364afc121612da7
sha256: 86cdae7350f701534bac2d7253025812b4177362d2e3cd7c347175e0ca4237a0
sha512: e3d5eff1b083b4c879e6061d50c3062cc49cb77a18da0f531daff155bbb42eba16db47dcb046bc882e5a54f9b76777bf7807eb787f3ba7a1f5309e1afd67b8b5
ssdeep: 24576:jQC2O4PLp9PZ84/I6WCFys6cyf5HwrVJSFwrtgZ:dWl9B5WCd6cyyJMw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 1.2.3.4
ProductVersion: 1.2.3.4
Translation: 0x0409 0x04b0

Win32/RiskWare.GameTool.P also known as:

FireEye	Generic.mg.2d99c1aa6567efc9
McAfee	RDN/Generic.grp
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Alibaba	RiskWare:Win32/GameTool.c793955a
Paloalto	generic.ml
Tencent	Win32.Trojan.Strictor.Hugf
McAfee-GW-Edition	BehavesLike.Win32.Pate.dc
Ikarus	PUA.RiskWare.Gametool
Webroot	W32.Malware.Gen
Antiy-AVL	GrayWare/Win32.Generic
Endgame	malicious (moderate confidence)
AegisLab	Trojan.Win32.Generic.4!c
AhnLab-V3	Malware/Win32.Generic.C2190116
VBA32	BScope.Trojan.Downloader
MAX	malware (ai score=96)
ESET-NOD32	a variant of Win32/RiskWare.GameTool.P
Rising	Trojan.Generic!8.C3/N3#98% (RDM+:cmRtazqfEnnr7VVfNZEb2F+Si3Zg)
SentinelOne	DFI – Suspicious PE
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Win32/RiskWare.GameTool.P?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/RiskWare.GameTool.P malicious file