Malware

VirTool:Win32/CeeInject.ADU!bit removal

Malware Removal

The VirTool:Win32/CeeInject.ADU!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject.ADU!bit virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to remove evidence of file being downloaded from the Internet
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine VirTool:Win32/CeeInject.ADU!bit?


File Info:

crc32: CEA50D87
md5: d1d7fb7237bd91bae0295a196576a203
name: ne.exe
sha1: 0f4c9f642159f61af224b2fd5d14ec07638bbe45
sha256: a4adcf45a5107c4572f8929fdad250ba303897b56bb685af61a084175abaff51
sha512: 288b8858a722733c993ad5182fc19855f9cd2ff2d2dc4f35ef24ee580432daaac9e424e8c437d231a00b78ba3701b40ee77025cd035530b1dcf299be88d010a2
ssdeep: 24576:jmTSRtiFW2lyAP8hDbjuSahe+emUA5r9+hSV:jm60P8pbKvRZ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

VirTool:Win32/CeeInject.ADU!bit also known as:

MicroWorld-eScanTrojan.Agent.CZFN
FireEyeGeneric.mg.d1d7fb7237bd91ba
McAfeeFareit-FLN!D1D7FB7237BD
ALYacTrojan.Agent.CZFN
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 00531b081 )
BitDefenderTrojan.Agent.CZFN
K7GWTrojan ( 00531b081 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTSPY_HPLOKI.SMBD
F-ProtW32/Trojan3.AMLB
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Dropper-gen [Drp]
GDataTrojan.Agent.CZFN
KasperskyHEUR:Backdoor.Win32.Generic
NANO-AntivirusTrojan.Win32.Stealer.fcamcg
AegisLabTrojan.Win32.Generic.m!c
RisingTrojan.Injector!1.AFE3 (CLOUD)
Endgamemalicious (high confidence)
SophosMal/Fareit-Q
ComodoMalware@#22djk4anblewv
F-SecureHeuristic.HEUR/AGEN.1033899
DrWebTrojan.PWS.Stealer.23180
ZillyaDropper.Injector.Win32.84698
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Fareit.tc
Trapminemalicious.high.ml.score
EmsisoftTrojan.Agent.CZFN (B)
CyrenW32/Trojan.YSXH-7838
JiangminBackdoor.Generic.ardg
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1033899
Antiy-AVLTrojan/Win32.TSGeneric
ArcabitTrojan.Agent.CZFN
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmHEUR:Backdoor.Win32.Generic
MicrosoftVirTool:Win32/CeeInject.ADU!bit
AhnLab-V3Win-Trojan/Delphiless.Exp
Acronissuspicious
VBA32TrojanPSW.Stealer
Ad-AwareTrojan.Agent.CZFN
MalwarebytesSpyware.LokiBot
PandaTrj/CI.A
ZonerTrojan.Win32.67200
ESET-NOD32a variant of Win32/Injector.DYBC
TrendMicro-HouseCallTSPY_HPLOKI.SMBD
TencentMalware.Win32.Gencirc.10b3afd5
YandexTrojan.Injector!ToQ8ITKJy9A
MAXmalware (ai score=99)
MaxSecureTrojan.Malware.7175197.susgen
FortinetW32/Injector.DXRU!tr
BitDefenderThetaGen:NN.ZelphiF.34106.fHW@auM7K1li
AVGWin32:Dropper-gen [Drp]
Cybereasonmalicious.237bd9
Paloaltogeneric.ml
Qihoo-360HEUR/QVM05.1.447D.Malware.Gen

How to remove VirTool:Win32/CeeInject.ADU!bit?

VirTool:Win32/CeeInject.ADU!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment