Categories: Malware

VirTool:Win32/CeeInject.ANM!bit malicious file

The VirTool:Win32/CeeInject.ANM!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/CeeInject.ANM!bit virus can do?

Executable code extraction
Creates RWX memory
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Attempts to modify proxy settings
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

81117.prohoster.biz

How to determine VirTool:Win32/CeeInject.ANM!bit?


File Info:
crc32: 63E58081md5: a750fe631be20e5d7a7f4ef6fed61d1aname: A750FE631BE20E5D7A7F4EF6FED61D1A.mlwsha1: 0923d9fb791be8d568100dfa98c11bc4419636f6sha256: 0396e0e5d89d10adefdc67715042b565ea50f96d57ddf645bd482b2655f46bb7sha512: e4ae01dcda48506294ff26b6cef28ec8a9990d7d0d5f98b995920055d1c5d24cc37748bdb29afe97aa949e94995c3e71ebf0d3085a9f8b4648b3f7fb5b0eb27dssdeep: 12288:fXW6m07LTPr2oRmmOsy1hNdJBsn6px47je244:fWY7Hr2ogmOsUNrc6n47j9xtype: PE32 executable (GUI) Intel 80386 system file, for MS Windows
Version Info:
InternalName: ztaze.ote

VirTool:Win32/CeeInject.ANM!bit also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00541b831 )
Lionic	Trojan.Win32.Generic.mmvM
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader27.16110
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKDZ.51492
Cylance	Unsafe
Zillya	Trojan.Stealer.Win32.2588
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	VirTool:Win32/CeeInject.9a9a843a
K7GW	Trojan ( 00541b831 )
Cybereason	malicious.31be20
Symantec	Packed.Generic.525
ESET-NOD32	a variant of Win32/Kryptik.GNAI
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
ClamAV	Win.Packed.Azorult-7596348-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.51492
NANO-Antivirus	Trojan.Win32.Kryptik.fknmky
MicroWorld-eScan	Trojan.GenericKDZ.51492
Tencent	Win32.Trojan.Generic.Lmai
Ad-Aware	Trojan.GenericKDZ.51492
Sophos	Mal/Generic-R + Mal/GandCrab-G
Comodo	TrojWare.Win32.Ransom.Gandcrab.GC@7zlhhh
F-Secure	Heuristic.HEUR/AGEN.1107206
BitDefenderTheta	Gen:NN.ZexaF.34266.Gu0@aG1nFhhi
TrendMicro	Trojan.Win32.SODINOK.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
FireEye	Generic.mg.a750fe631be20e5d
Emsisoft	Trojan.GenericKDZ.51492 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Stealer.tc
Avira	HEUR/AGEN.1107206
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2998389
Microsoft	VirTool:Win32/CeeInject.ANM!bit
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
GData	Trojan.GenericKDZ.51492
AhnLab-V3	Trojan/Win32.Kryptik.R246186
Acronis	suspicious
McAfee	Trojan-FPST!A750FE631BE2
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Fuerboos
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Trojan.Win32.SODINOK.SM.hp
Rising	Trojan.Generic@ML.84 (RDML:ToIKE+AsvxUVUh8EZz6JKA)
Yandex	Trojan.GenAsa!SSMMCYlid5g
Ikarus	Trojan.Inject
MaxSecure	Ransomeware.CRAB.gen
Fortinet	W32/Kryptik.GNAQ!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml