Categories: Malware

VirTool:Win32/CeeInject.ADU!bit removal

The VirTool:Win32/CeeInject.ADU!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject.ADU!bit virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to remove evidence of file being downloaded from the Internet
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine VirTool:Win32/CeeInject.ADU!bit?


File Info:

crc32: CEA50D87md5: d1d7fb7237bd91bae0295a196576a203name: ne.exesha1: 0f4c9f642159f61af224b2fd5d14ec07638bbe45sha256: a4adcf45a5107c4572f8929fdad250ba303897b56bb685af61a084175abaff51sha512: 288b8858a722733c993ad5182fc19855f9cd2ff2d2dc4f35ef24ee580432daaac9e424e8c437d231a00b78ba3701b40ee77025cd035530b1dcf299be88d010a2ssdeep: 24576:jmTSRtiFW2lyAP8hDbjuSahe+emUA5r9+hSV:jm60P8pbKvRZtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

VirTool:Win32/CeeInject.ADU!bit also known as:

MicroWorld-eScan Trojan.Agent.CZFN
FireEye Generic.mg.d1d7fb7237bd91ba
McAfee Fareit-FLN!D1D7FB7237BD
ALYac Trojan.Agent.CZFN
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
Sangfor Malware
K7AntiVirus Trojan ( 00531b081 )
BitDefender Trojan.Agent.CZFN
K7GW Trojan ( 00531b081 )
CrowdStrike win/malicious_confidence_100% (W)
TrendMicro TSPY_HPLOKI.SMBD
F-Prot W32/Trojan3.AMLB
Symantec Trojan.Gen.2
APEX Malicious
Avast Win32:Dropper-gen [Drp]
GData Trojan.Agent.CZFN
Kaspersky HEUR:Backdoor.Win32.Generic
NANO-Antivirus Trojan.Win32.Stealer.fcamcg
AegisLab Trojan.Win32.Generic.m!c
Rising Trojan.Injector!1.AFE3 (CLOUD)
Endgame malicious (high confidence)
Sophos Mal/Fareit-Q
Comodo Malware@#22djk4anblewv
F-Secure Heuristic.HEUR/AGEN.1033899
DrWeb Trojan.PWS.Stealer.23180
Zillya Dropper.Injector.Win32.84698
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.Fareit.tc
Trapmine malicious.high.ml.score
Emsisoft Trojan.Agent.CZFN (B)
Cyren W32/Trojan.YSXH-7838
Jiangmin Backdoor.Generic.ardg
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1033899
Antiy-AVL Trojan/Win32.TSGeneric
Arcabit Trojan.Agent.CZFN
SUPERAntiSpyware Trojan.Agent/Gen-Downloader
ZoneAlarm HEUR:Backdoor.Win32.Generic
Microsoft VirTool:Win32/CeeInject.ADU!bit
AhnLab-V3 Win-Trojan/Delphiless.Exp
Acronis suspicious
VBA32 TrojanPSW.Stealer
Ad-Aware Trojan.Agent.CZFN
Malwarebytes Spyware.LokiBot
Panda Trj/CI.A
Zoner Trojan.Win32.67200
ESET-NOD32 a variant of Win32/Injector.DYBC
TrendMicro-HouseCall TSPY_HPLOKI.SMBD
Tencent Malware.Win32.Gencirc.10b3afd5
Yandex Trojan.Injector!ToQ8ITKJy9A
MAX malware (ai score=99)
MaxSecure Trojan.Malware.7175197.susgen
Fortinet W32/Injector.DXRU!tr
BitDefenderTheta Gen:NN.ZelphiF.34106.fHW@auM7K1li
AVG Win32:Dropper-gen [Drp]
Cybereason malicious.237bd9
Paloalto generic.ml
Qihoo-360 HEUR/QVM05.1.447D.Malware.Gen

How to remove VirTool:Win32/CeeInject.ADU!bit?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

6 hours ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

6 hours ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

7 hours ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

7 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

7 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

8 hours ago