Categories: Malware

VirTool:Win32/CeeInject!ET removal

The VirTool:Win32/CeeInject!ET is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/CeeInject!ET virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Executed a process and injected code into it, probably while unpacking
  • Behavioural detection: Injection (inter-process)
  • Created a process from a suspicious location

How to determine VirTool:Win32/CeeInject!ET?


File Info:

name: 62478FC7AF9F0494938B.mlwpath: /opt/CAPEv2/storage/binaries/63007e97e1d802fe8217ddfb3abed9eb10642011c75582958f9990e9741fde65crc32: F32E26A6md5: 62478fc7af9f0494938bcb4782ccc9d2sha1: 7b9c0d13da3c8f0035a661f571191697825f34edsha256: 63007e97e1d802fe8217ddfb3abed9eb10642011c75582958f9990e9741fde65sha512: 66ff04eba259969a7a3d79f5b785cc0f1254d8e7947933d9242e8b66d4e6ce81869097af02c9cafe8e893e357c7b8108885e8c6e3c81a54158aa5bff8255a7a6ssdeep: 12288:qaOvHI26VdxhGJJ3Wdsg7NKsiz1+ypx9WBg7Luu:KydxYJUd7KDz1JzHuutype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19FE6A3568C7B05BC9E312CF90E7D6A105B775A1607149AE319FEE2FC0E7C2FDA58009Asha3_384: e09fe08b5308fb02bd315121ff245de738e5e05b1e8be5599548e9c61c766286aa9ff872d0c0fbb533a30f9e499fd356ep_bytes: e807400000e979feffffcc558bec5756timestamp: 2011-04-27 15:49:55

Version Info:

0: [No Data]

VirTool:Win32/CeeInject!ET also known as:

Elastic malicious (high confidence)
DrWeb Trojan.Siggen2.27606
Cynet Malicious (score: 100)
McAfee Sefnit.p
Cylance Unsafe
K7AntiVirus Riskware ( 0040eff71 )
K7GW Riskware ( 0040eff71 )
Cybereason malicious.7af9f0
BitDefenderTheta Gen:NN.ZexaF.34606.@tZ@aSsGW!ji
VirIT Trojan.Win32.Generic.XDK
Cyren W32/Zbot.BU.gen!Eldorado
ESET-NOD32 a variant of Win32/TrojanDownloader.Agent.QQD
ClamAV Win.Worm.Kolab-821
Kaspersky Net-Worm.Win32.Kolab.aald
BitDefender Gen:Variant.Buzy.3163
NANO-Antivirus Trojan.Win32.Kolab.rbybn
MicroWorld-eScan Gen:Variant.Buzy.3163
Avast Win32:Sefnit-AY [Trj]
Rising Worm.Kolab!8.1C4D (CLOUD)
Ad-Aware Gen:Variant.Buzy.3163
Comodo Malware@#rkwxkucoxeug
F-Secure Trojan.TR/Downloader.Gen7
Zillya Worm.Kolab.Win32.5774
McAfee-GW-Edition Sefnit.p
FireEye Generic.mg.62478fc7af9f0494
Emsisoft Gen:Variant.Buzy.3163 (B)
Ikarus Net-Worm.Win32.Kolab
GData Gen:Variant.Buzy.3163
Jiangmin Worm/Kolab.hpi
Avira TR/Downloader.Gen7
Antiy-AVL Worm[Net]/Win32.Kolab
Kingsoft Win32.Troj.Generic_a.c.(kcloud)
Arcabit Trojan.Buzy.DC5B
ViRobot Worm.Win32.A.Net-Kolab.1473359
ZoneAlarm Net-Worm.Win32.Kolab.aald
Microsoft VirTool:Win32/CeeInject.gen!ET
SentinelOne Static AI – Suspicious PE
AhnLab-V3 Worm/Win32.Kolab.C60883
VBA32 Worm.Kolab
Malwarebytes Generic.Malware/Suspicious
APEX Malicious
Tencent Malware.Win32.Gencirc.10ba2fe7
Yandex Trojan.GenAsa!Vs2azOm6p0w
MAX malware (ai score=80)
Fortinet W32/Agent.SF!tr
AVG Win32:Sefnit-AY [Trj]
Panda Trj/CI.A
CrowdStrike win/malicious_confidence_70% (D)

How to remove VirTool:Win32/CeeInject!ET?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

3 days ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

3 days ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

3 days ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

3 days ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

3 days ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

3 days ago