Malware

What is “VirTool:Win32/CeeInject.AHY!bit”?

Malware Removal

The VirTool:Win32/CeeInject.AHY!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject.AHY!bit virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Network activity detected but not expressed in API logs

How to determine VirTool:Win32/CeeInject.AHY!bit?


File Info:

crc32: 6AC5FED4
md5: 2846d94842ae03561a7bd086a9c3f0c9
name: 2846D94842AE03561A7BD086A9C3F0C9.mlw
sha1: cb98878fcc2ca03123be193cd70632a5d3c7ec71
sha256: 6012b18f17f4790f90b6f75f87ef66353e3ff856a0c8c3f6b315c1e03997f42d
sha512: c7af1a4e48a22a14a47392ae9fdfc694ceef2989e4cdb004201011546a558e32dfb25d28ab3984f1c160e0391e44c4e3338b21bd4e80376b2dd9507afcabf329
ssdeep: 49152:P595SHb67Sy5BpK5NbUwr6vtvkRdCCG9uBbacyh0nDE5a20E7:REcX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

VirTool:Win32/CeeInject.AHY!bit also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053fe731 )
LionicTrojan.Win32.Ekstak.4!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.Sigmal.S3146657
ALYacGen:Variant.Application.Fugrafa.5
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 0053fe731 )
Cybereasonmalicious.842ae0
CyrenW32/S-8cf9ff03!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIQN
APEXMalicious
AvastWin32:ICLoader-X [Adw]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Application.Fugrafa.5
NANO-AntivirusTrojan.Win32.Ekstak.ffdsrb
MicroWorld-eScanGen:Variant.Application.Fugrafa.5
TencentMalware.Win32.Gencirc.10b46192
Ad-AwareGen:Variant.Application.Fugrafa.5
SophosMal/Generic-S
ComodoApplication.Win32.ICLoader.GS@84429a
TrendMicroTROJ_EKSTAK.L
McAfee-GW-EditionBehavesLike.Win32.Worm.vh
FireEyeGeneric.mg.2846d94842ae0356
EmsisoftGen:Variant.Application.Fugrafa.5 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Ekstak.lxe
WebrootW32.Adware.Gen
AviraADWARE/ICLoader.Gen7
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.26F1C27
MicrosoftVirTool:Win32/CeeInject.AHY!bit
ArcabitTrojan.Application.Fugrafa.5
GDataWin32.Application.ICLoader.F
AhnLab-V3PUP/Win32.ICLoader.R231587
Acronissuspicious
McAfeePacked-FIP!2846D94842AE
MAXmalware (ai score=97)
VBA32BScope.Trojan.Selfdel
MalwarebytesAdware.ICLoader
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_EKSTAK.L
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
YandexTrojan.GenAsa!AreX06bvpdI
IkarusAdWare.ICLoader
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:ICLoader-X [Adw]
Paloaltogeneric.ml

How to remove VirTool:Win32/CeeInject.AHY!bit?

VirTool:Win32/CeeInject.AHY!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment