Malware

VirTool:Win32/CeeInject.AJX!bit information

Malware Removal

The VirTool:Win32/CeeInject.AJX!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What VirTool:Win32/CeeInject.AJX!bit virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Detects the presence of Wine emulator via registry key
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine VirTool:Win32/CeeInject.AJX!bit?



File Info:

crc32: AEB4D4D1
md5: 006f49f725de37647718fd56aaa344cc
name: 006F49F725DE37647718FD56AAA344CC.mlw
sha1: 32e5e84bfa68b08ecfcfca97b0f72f57ff20b8eb
sha256: 24a9eb0105febf8abb659f037328472b3163ec14cf245131b63a06a1b9cc4f44
sha512: c5e60c4ccf64a42a51a9365cebc0025e60db4083d4337fedb8f7c9a06c683fe19774872b7fac2d059c0e9834ca68823638882e1f3746e85dd395200c302b9110
ssdeep: 24576:vbRYbYW3EqPY5i1kxDENYQnyNgqterajg4Ksz2BgUZUxZGoEmzogo/pRX4y:v2bYW351kJGy9Bg4wjZUxZGoEdb
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright (c) 1983,2001 Borland Software Corporation
InternalName: DCC32
FileVersion: 7.0.4.453
Copyright: Copyright (c) 1983,2001 Borland Software Corporation
CompanyName: Borland Software Corporation
ProductName: Borland Delphi/C++Builder (Enterprise Edition)
ProductVersion: 7.0.4.453
FileDescription: Delphi Pascal Compiler
Translation: 0x0409 0x04e4

VirTool:Win32/CeeInject.AJX!bit also known as:

K7AntiVirusTrojan ( 00537eb21 )
Elasticmalicious (high confidence)
DrWebTrojan.InstallCube.3673
CynetMalicious (score: 100)
CAT-QuickHealPUA.IcloaderRI.S19006307
ALYacApplication.Bundler.ICLoader.4.Gen
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.3010706
SangforPUP.Win32.ICLoader.Gen7
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.5e0a5d59
K7GWTrojan ( 00538b811 )
Cybereasonmalicious.725de3
CyrenW32/Trojan.BXC.gen!Eldorado
SymantecPUA.ICLoader
ESET-NOD32a variant of Win32/Kryptik.GJDT
APEXMalicious
AvastWin32:ICLoader-X [Adw]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderApplication.Bundler.ICLoader.4.Gen
NANO-AntivirusTrojan.Win32.Ekstak.ffqxrm
MicroWorld-eScanApplication.Bundler.ICLoader.4.Gen
TencentTrojan.Win32.Kryptik.gjiy
Ad-AwareApplication.Bundler.ICLoader.4.Gen
SophosMal/Generic-S
ComodoApplication.Win32.ICLoader.GHH@7rkufo
BitDefenderThetaGen:NN.ZexaF.34266.3r0@a4X8@qdi
VIPRETrojan.Win32.Generic!BT
TrendMicroPUA.Win32.ICLoader.SMA
McAfee-GW-EditionBehavesLike.Win32.Generic.th
FireEyeGeneric.mg.006f49f725de3764
EmsisoftApplication.Bundler.ICLoader.4.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Ekstak.ndg
AviraPUA/ICLoader.Gen7
Antiy-AVLTrojan/Generic.ASBOL.C4FA
MicrosoftVirTool:Win32/CeeInject.AJX!bit
SUPERAntiSpywarePUP.InstallCore/Variant
GDataWin32.Application.ICLoader.F
AhnLab-V3PUP/Win32.Agent.R232392
Acronissuspicious
McAfeePacked-FJO!006F49F725DE
MAXmalware (ai score=79)
MalwarebytesPUP.Optional.ICLoader
PandaTrj/Genetic.gen
TrendMicro-HouseCallPUA.Win32.ICLoader.SMA
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
YandexTrojan.GenAsa!OZVPnw8G0Zw
IkarusTrojan.Win32.Crypt
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:ICLoader-X [Adw]
Paloaltogeneric.ml

How to remove VirTool:Win32/CeeInject.AJX!bit?

VirTool:Win32/CeeInject.AJX!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment