Malware

What is “VirTool:Win32/CeeInject.BDE!bit”?

Malware Removal

The VirTool:Win32/CeeInject.BDE!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject.BDE!bit virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization

How to determine VirTool:Win32/CeeInject.BDE!bit?


File Info:

crc32: 6DD2BB1F
md5: 7ff0833e3896836edf287359b5cc8434
name: 7FF0833E3896836EDF287359B5CC8434.mlw
sha1: 1ae55978b7aeb3fa90da50a35b71d6163517f5be
sha256: 68c077e0ec4da3fd477ad2970942a2a12eb1d72ebd9e9266f53a411376601839
sha512: f3eeb988881ebe4c9cb5affcd65f983a6b7c9c9aeed4d394103f4ca71c422604bf940e132f87d7301fdf065ce48ba6debe061874018245bedab060b163762b32
ssdeep: 6144:v1Se74P87AQlINJR8XFh7RsqkzbmQ4EVSOd21hvu74VKzH/EKJ/rajbg4eduYg4:vZevxOfNOd0IIKVog9ux
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2004 - 2013, SopCast.com. All rights reserved.
InternalName: SopCast.exe
FileVersion: 4.2.0.800
CompanyName: www.sopcast.com
Comments: www.sopcast.com
ProductName: SopCast
ProductVersion: 4.2.0.800
FileDescription: SopCast Main Application
OriginalFilename: SopCast.exe
Translation: 0x0409 0x04e4

VirTool:Win32/CeeInject.BDE!bit also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053fb461 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Ransom.GandCrab
CylanceUnsafe
ZillyaTrojan.GandCrypt.Win32.1130
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaRansom:Win32/GandCrypt.7800f34f
K7GWTrojan ( 0053fb461 )
Cybereasonmalicious.e38968
SymantecDownloader
ESET-NOD32a variant of Win32/Kryptik.GLNI
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.GandCrypt.fxt
BitDefenderGen:Variant.Brresmon.120
NANO-AntivirusTrojan.Win32.GandCrypt.fjnuwy
ViRobotTrojan.Win32.S.GandCrab.454656
MicroWorld-eScanGen:Variant.Brresmon.120
Ad-AwareGen:Variant.Brresmon.120
SophosMal/Generic-S + Troj/Ransom-FCE
BitDefenderThetaGen:NN.ZexaF.34688.Bu0@a4idkthj
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionTrojan-FQUD!7FF0833E3896
FireEyeGeneric.mg.7ff0833e3896836e
EmsisoftGen:Variant.Brresmon.120 (B)
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1111393
eGambitUnsafe.AI_Score_95%
MicrosoftVirTool:Win32/CeeInject.BDE!bit
ArcabitTrojan.Brresmon.120
AegisLabTrojan.Win32.GandCrypt.4!c
GDataGen:Variant.Brresmon.120
AhnLab-V3Win-Trojan/Gandcrab09.Exp
McAfeeTrojan-FQUD!7FF0833E3896
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.GandCrypt
MalwarebytesRansom.GandCrab
PandaTrj/GdSda.A
TencentMalware.Win32.Gencirc.114d6186
YandexTrojan.GandCrypt!DctrkK+XMcg
IkarusTrojan.Win32.Crypt
FortinetW32/GenKryptik.CKDY!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove VirTool:Win32/CeeInject.BDE!bit?

VirTool:Win32/CeeInject.BDE!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment