VirTool:Win32/CeeInject.OA!bit information

The VirTool:Win32/CeeInject.OA!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/CeeInject.OA!bit virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine VirTool:Win32/CeeInject.OA!bit?


File Info:
name: 6F7A7F9C912995A79A23.mlw
path: /opt/CAPEv2/storage/binaries/d04c0f426c36f0512804fdb0df3af103da2071bba6f0e28ea8c997cef0ca943a
crc32: B739F9A8
md5: 6f7a7f9c912995a79a23873f562fff25
sha1: 51f7faa7bb58a3e5e31a316c2fb84e8aa77363bd
sha256: d04c0f426c36f0512804fdb0df3af103da2071bba6f0e28ea8c997cef0ca943a
sha512: 112675d7a0a314b5ff4e3a5d1d6b5c9b379aa0e3247b3c0f3c802889664f7f568c4fdb4a0f6a09366a399fd0335e2fc65e94d3eaef76e418e3229a2c50311852
ssdeep: 3072:RootxdsEPsVXldwIUTtZ8XiICTWMqeCpx0F+K:x7MXLwQSICCMqeCpx0sK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1AEB60BBCFAD0CF69C85577F8A4DF0718A771A0CE878397876B98A1646CCD3440A6E1D8
sha3_384: c9534a500ae788eec676d503085a5bb778512f6049a49aa50474fe989a6157221f8c8b06e6c4c49f7c2ae12a6d654452
ep_bytes: 558bec83c4c4b89c424000e86cf7ffff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

VirTool:Win32/CeeInject.OA!bit also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.346319
FireEye	Generic.mg.6f7a7f9c912995a7
Skyhigh	Trojan-FLKQ!6F7A7F9C9129
ALYac	Gen:Variant.Graftor.346319
Malwarebytes	Malware.AI.2779939198
Zillya	Trojan.Injector.Win32.470599
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Graftor.D548CF
Baidu	Win32.Trojan.Injector.jt
Symantec	Ransom.Cerber
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.DLGQ
APEX	Malicious
TrendMicro-HouseCall	BKDR_HPNETWIRED.SM1
ClamAV	Win.Trojan.RC465-5900681-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Graftor.346319
NANO-Antivirus	Trojan.Win32.DLGQ.emajwk
Avast	Win32:Evo-gen [Trj]
Emsisoft	Gen:Variant.Graftor.346319 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
VIPRE	Gen:Variant.Graftor.346319
TrendMicro	BKDR_HPNETWIRED.SM1
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Google	Detected
Avira	TR/ATRAPS.Gen
Microsoft	VirTool:Win32/CeeInject.OA!bit
GData	Gen:Variant.Graftor.346319
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Paylonjek.R195431
McAfee	Trojan-FLKQ!6F7A7F9C9129
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Trojan.Injector!8.C4 (TFE:5:9uctLy5mCMJ)
Ikarus	Trojan.Inject
Fortinet	W32/Injector.DKUW!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Injector.DLDY

How to remove VirTool:Win32/CeeInject.OA!bit?

VirTool:Win32/CeeInject.OA!bit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X