Malware

Should I remove “VirTool:Win32/CeeInject.DC”?

Malware Removal

The VirTool:Win32/CeeInject.DC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject.DC virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed instant messenger clients

How to determine VirTool:Win32/CeeInject.DC?


File Info:

crc32: 0CF61E45
md5: 3b91ed0d2a9eb9d7dd3dfb918aceb54c
name: 3B91ED0D2A9EB9D7DD3DFB918ACEB54C.mlw
sha1: ef29ab563d72d4923f5c3c101a7e274c8bcc7f0e
sha256: fef8517c65cc6336c1c44eef2423ea2d96d6e6c1fb55c1250df73f1c5910dddd
sha512: c9dc963cf8528ffcea38103919440ba7ade0c2c79fd910300fdacac457d5e2f54b5d299e30d1b0e397f428148336ad60c80a0617912d9232f441e08654c26a4e
ssdeep: 12288:TfoGUGcrx2vBzcoYAlYf/x086aK/XZ81il:Tf7irx2vNcV6h86Ffy1y
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: REGEDIT
FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.1.2600.5512
FileDescription: Registry Editor
OriginalFilename: REGEDIT.EXE
Translation: 0x0409 0x04b0

VirTool:Win32/CeeInject.DC also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004eab211 )
LionicTrojan.Win32.Agent.lN7j
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Siggen2.9094
CynetMalicious (score: 100)
ALYacTrojan.EmotetU.Gen.yq0@imVL4Dni
CylanceUnsafe
SangforTrojan.Win32.Agent.updb
CrowdStrikewin/malicious_confidence_90% (D)
K7GWTrojan ( 004eab211 )
Cybereasonmalicious.d2a9eb
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDropper.Agent.PRQ
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.EmotetU.Gen.yq0@imVL4Dni
NANO-AntivirusVirus.Win32.Gen.ccmw
ViRobotTrojan.Win32.A.Buzus.388554
MicroWorld-eScanTrojan.EmotetU.Gen.yq0@imVL4Dni
TencentWin32.Trojan.Generic.Lmkv
Ad-AwareTrojan.EmotetU.Gen.yq0@imVL4Dni
ComodoTrojWare.Win32.Graftor.AS@4paxjm
BitDefenderThetaGen:NN.ZexaF.34266.yq0@amVL4Dni
VIPRETrojan.Win32.Inject.ce (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGeneric.mg.3b91ed0d2a9eb9d7
EmsisoftTrojan.EmotetU.Gen.yq0@imVL4Dni (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Buzus.awle
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.150AFF
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftVirTool:Win32/CeeInject.DC
GDataTrojan.EmotetU.Gen.yq0@imVL4Dni
McAfeePWSZbot-FAEY!3B91ED0D2A9E
MAXmalware (ai score=88)
VBA32Trojan.Buzus
PandaTrj/Fignotok.A
RisingTrojan.Generic@ML.100 (RDML:RrzDVVjsC/RsiypUxLJvJQ)
YandexTrojan.PWS.Agent!rD6cCs47urw
IkarusTrojan.Win32.Buzus
FortinetW32/Buzus.IBUV!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove VirTool:Win32/CeeInject.DC?

VirTool:Win32/CeeInject.DC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment