About “Win32:Gamevance-J [PUP]” infection

The Win32:Gamevance-J [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Gamevance-J [PUP] virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Gamevance-J [PUP]?


File Info:
name: AB5847ADD25DBBA7DAE6.mlw
path: /opt/CAPEv2/storage/binaries/68501243cdcfd798e28e11ae393a5291f4165add73ce1fee676b5836ade0c377
crc32: BD872495
md5: ab5847add25dbba7dae6946471d7c2ce
sha1: 84d03c4d4c2ccb52845371edfdf815a64a129e9c
sha256: 68501243cdcfd798e28e11ae393a5291f4165add73ce1fee676b5836ade0c377
sha512: acfdde7158ead8fe7f2811501c19fb682c001a9af0689fb893f1b16426feba0d96ca3e541ddc59bef4ca405052e8709e33b93d0da75b8e08d601fc1ecb85a15c
ssdeep: 24576:5cw5Sjo3r1EKkuy5vuvGG/3t+EtTomudN/BRqLLRFN2kfmmkP+zsqwGV:uw5SjEEKZWmOskmW/zqLLvZfmFPrq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T130852335BB418E62FAD2C63819FAF7817B169D80AED324917CBC74753B706C04AACB45
sha3_384: ab492ec6bbc0aaf4a521a3f7ebf38fd43d3eb7b2be767eda34f32907c9eabff185ca1e8e29b944fac5496dcf32222e9a
ep_bytes: 00000000000000000000000000000000
timestamp: 2011-01-28 07:31:04

Version Info:
0: [No Data]

Win32:Gamevance-J [PUP] also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.Gamevance.lv4x
FireEye	Generic.mg.ab5847add25dbba7
Cylance	unsafe
Zillya	Trojan.GenericML.Win32.31370
Sangfor	Trojan.Win32.Agent.Vtlq
Cyren	W32/ABRisk.WKEF-7698
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
Avast	Win32:Gamevance-J [PUP]
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Suspicious PE
Google	Detected
Antiy-AVL	Trojan/Win32.SGeneric
ZoneAlarm	UDS:Trojan.Win32.GenericML.xnet
McAfee	Artemis!AB5847ADD25D
Malwarebytes	Generic.Adware.Agent.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H07GE23
Rising	Trojan.Generic@AI.100 (RDML:rD7CvOL4rVrJbqusvwfyTQ)
Fortinet	Riskware/Application
AVG	Win32:Gamevance-J [PUP]
DeepInstinct	MALICIOUS

How to remove Win32:Gamevance-J [PUP]?

Win32:Gamevance-J [PUP] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X