Categories: Malware

VirTool:Win32/CeeInject!bit information

The VirTool:Win32/CeeInject!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/CeeInject!bit virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Attempts to connect to a dead IP:Port (20 unique times)
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Executed a process and injected code into it, probably while unpacking
Steals private information from local Internet browsers
Exhibits behavior characteristic of Kelihos malware
Installs itself for autorun at Windows startup
Collects information about installed applications
Creates a hidden or system file
Attempts to access Bitcoin/ALTCoin wallets
Harvests credentials from local FTP client softwares
Installs WinPCAP
Anomalous binary characteristics

How to determine VirTool:Win32/CeeInject!bit?


File Info:
crc32: 859983C9md5: eb5d7c28bc4ec27123ef45259fa039e8name: EB5D7C28BC4EC27123EF45259FA039E8.mlwsha1: 2170d3d131fbbd47c3b9cf4f9a5288090c02c82bsha256: ddb0fb4e0b0a44a57dbe597491ebb11e9ecc12d8042ea65c22650ed5c932553esha512: 58ea7323a82a85dbdafe641d1ac1a39437e75d6a9a0f398945e677cdd321efe6805403839af527ec487b4fde6a01e3be591fb90c581edbb917c5390e91213962ssdeep: 24576:UgIfK0dknR4HBVNIwYzFJGo+3XoUY3IQ+l7AG7SxT9Qn:UgIRdknR4hVNIwcF0nY3Ol8GePitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompanyNamex9000: : ileVersionComments: FileDescription: I_x6867xc96f xd4dicrosox8066t x57fax7840x7c7bx5e94x7528x7a0bx5e8fTranslation: 0x0804 0x04b0

VirTool:Win32/CeeInject!bit also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Siggen2.1579
MicroWorld-eScan	Trojan.GenericKDZ.37507
FireEye	Generic.mg.eb5d7c28bc4ec271
CAT-QuickHeal	Trojan.Generic.ZZ4
ALYac	Trojan.GenericKDZ.37507
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 00500beb1 )
BitDefender	Trojan.GenericKDZ.37507
K7GW	Trojan ( 00500beb1 )
Cybereason	malicious.8bc4ec
BitDefenderTheta	AI:Packer.7B87108221
Cyren	W32/Agent.AMW.gen!Eldorado
Symantec	Trojan.Gen
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Zusy-9793528-0
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.DIYG.ejwbtk
Tencent	Malware.Win32.Gencirc.10bcaf62
Ad-Aware	Trojan.GenericKDZ.37507
Emsisoft	Trojan.GenericKDZ.37507 (B)
Comodo	TrojWare.Win32.Kelihos.B@6okwz3
F-Secure	Heuristic.HEUR/AGEN.1128858
Zillya	Trojan.Injector.Win32.444559
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
GData	Trojan.GenericKDZ.37507
Jiangmin	Trojan.Generic.apjnu
Avira	HEUR/AGEN.1128858
Antiy-AVL	Trojan/Win32.AGeneric
Arcabit	Trojan.Generic.D9283
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	VirTool:Win32/CeeInject!bit
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Inject.R192579
McAfee	GenericRXEU-XT!EB5D7C28BC4E
MAX	malware (ai score=85)
VBA32	OScope.Malware-Cryptor.Hlux
Malwarebytes	Zbot.Trojan.Stealer.DDS
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Injector.DIYG
Rising	Trojan.Injector!1.A749 (CLASSIC)
Yandex	Trojan.GenAsa!oIis2YEdJ3A
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Injector.DJCJ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/Trojan.b3e