Malware

How to remove “VirTool:Win32/Injector!DP”?

Malware Removal

The VirTool:Win32/Injector!DP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/Injector!DP virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Injection with CreateRemoteThread in a remote process
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Attempts to modify Internet Explorer’s start page
  • Executed a process and injected code into it, probably while unpacking
  • Code injection with CreateRemoteThread in a remote process
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine VirTool:Win32/Injector!DP?


File Info:

crc32: E24CF010
md5: ab9cd270f9ce0c541b1783814f86580c
name: AB9CD270F9CE0C541B1783814F86580C.mlw
sha1: f12c791f32248dd3e25928e3d0a11910c53b5cc8
sha256: 91fcb0e66058dff4fa0fb81df5433a018fe3c4892afdf24938e1c576d9f664c5
sha512: 00a477b8df42dd84e4a60cea8e55ea01d6aed098d22ae1ecc7a3c29e6829eb77dcee9e21bd685db18f595f75c3f3d94e2eedf53238a436a150588b1f925e6c3a
ssdeep: 3072:HpKCsv9Tsn5fVQKkGRJ964lVb+k0rhSoodYwd9IV/84kFLtClP8aM81F:HpHsvpc5fVQJGACb01SndTd9884EzaMs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

VirTool:Win32/Injector!DP also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004890de1 )
LionicTrojan.Win32.Generic.lJ9S
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad3.8872
McAfeePWS-Zbot-FAQD!AB9CD270F9CE
CylanceUnsafe
ZillyaBackdoor.Androm.Win32.1428
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004890de1 )
Cybereasonmalicious.0f9ce0
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Injector.AGAY
APEXMalicious
AvastWin32:Cutwail-BM [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.GenericKDZ.16539
NANO-AntivirusTrojan.Win32.DownLoad3.cratjz
MicroWorld-eScanTrojan.GenericKDZ.16539
TencentMalware.Win32.Gencirc.114991b0
Ad-AwareTrojan.GenericKDZ.16539
SophosML/PE-A + Troj/Zbot-ETU
ComodoTrojWare.Win32.Injector.AGQG@4xjtt3
BitDefenderThetaGen:NN.ZexaF.34266.kuZ@aWSJo7k
VIPRETrojan.Win32.Tepfer.aa (v)
TrendMicroTROJ_FIDOBOT.SM0
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.ab9cd270f9ce0c54
EmsisoftTrojan.GenericKDZ.16539 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.ivxx
AviraTR/Spy.Zbot.ajoumea
Antiy-AVLTrojan/Generic.ASMalwS.3290E2
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftVirTool:Win32/Injector.gen!DP
GDataTrojan.GenericKDZ.16539
Acronissuspicious
VBA32BScope.Trojan.Downloader
MAXmalware (ai score=87)
MalwarebytesTrojan.Crypt.NKN
PandaTrj/Dtcontx.D
TrendMicro-HouseCallTROJ_FIDOBOT.SM0
RisingTrojan.Generic@ML.100 (RDML:SrkUfeiTyYLxyyO1WbdWog)
YandexTrojan.Agent!Y/5Kz7p7/lc
IkarusTrojan.Win32.Tobfy
FortinetW32/Zbot.AGWV!tr
AVGWin32:Cutwail-BM [Trj]
Paloaltogeneric.ml

How to remove VirTool:Win32/Injector!DP?

VirTool:Win32/Injector!DP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment