How to remove “VirTool:Win32/Injector!R”?

The VirTool:Win32/Injector!R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/Injector!R virus can do?

Unconventionial language used in binary resources: Portuguese
Authenticode signature is invalid
Anomalous binary characteristics

How to determine VirTool:Win32/Injector!R?


File Info:
name: 524B9AFA19709447B15D.mlw
path: /opt/CAPEv2/storage/binaries/d7d8064916e52b0eda0b35c999aa52a49a0f3c7817a33200c17cda4a4bc76974
crc32: CC4C53B7
md5: 524b9afa19709447b15dad25e9a94660
sha1: 9f4c8aaf98b08cb887fc37a9dfec059ce133d329
sha256: d7d8064916e52b0eda0b35c999aa52a49a0f3c7817a33200c17cda4a4bc76974
sha512: 1a71f4503659a1faedc57b95d5e77cfc11e822cc8808e920c816c560f2330bd264509bed4565a69ef6ba84e60a3f2ffc2001198978c368a80b7f308938301755
ssdeep: 96:Jeb7O5NWjuhaq3j8BMFSK0lXAPXdZwzIqHqm1GEiBR9zppPtboynInXxnPY:48Dhah6r0EHwzHqIGDzLP1oynUBA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T190F1D81F97A5C526DFC11BB40767CD3BA437BA70300AFB234A8026053D70A52F9A96DB
sha3_384: d132a007333ebbd06b8cb8517fa9d2b7e6ae3082bc4a1b807bfffbd5cdceb7b7e373711519b0a9898eb87971b40ab8c9
ep_bytes: 660599006683e807eb1790909066f7d0
timestamp: 2008-11-26 00:11:04

Version Info:
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe
Translation: 0x0409 0x04b0

VirTool:Win32/Injector!R also known as:

Lionic	Trojan.Win32.Generic.kYLC
MicroWorld-eScan	Gen:Variant.Fugrafa.70843
ClamAV	Win.Dropper.Hydracrypt-9875071-0
FireEye	Generic.mg.524b9afa19709447
ALYac	Gen:Variant.Fugrafa.70843
Cylance	Unsafe
VIPRE	Gen:Variant.Fugrafa.70843
Sangfor	Trojan.Win32.Injector.FY
Alibaba	VirTool:Win32/Injector.b0357751
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Crypt.AUW
Cyren	W32/Injector.G.gen!Eldorado
Symantec	Trojan.Dropper
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.FY
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Fugrafa.70843
NANO-Antivirus	Trojan.Win32.Kolabc.lzqa
Avast	Win32:Agent-AECE [Trj]
Ad-Aware	Gen:Variant.Fugrafa.70843
Sophos	Mal/EncPk-IT
Comodo	Backdoor.Win32.Agent.UWP@rkh7p
DrWeb	BackDoor.Siggen.21901
Zillya	Backdoor.Agent.Win32.5009
TrendMicro	BKDR_INJECTOR_0000001.TOMA
McAfee-GW-Edition	BackDoor-DKI.gen.w
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Fugrafa.70843 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Fugrafa.70843
Jiangmin	Backdoor/Huigezi.2008.abai
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwFH.61
ViRobot	Backdoor.Win32.Agent.8192.E
Microsoft	VirTool:Win32/Injector.gen!R
Google	Detected
AhnLab-V3	Win32/IRCBot2.worm.Gen
McAfee	BackDoor-DKI.gen.w
VBA32	TScope.Malware-Cryptor.SB
TrendMicro-HouseCall	BKDR_INJECTOR_0000001.TOMA
Rising	Trojan.Win32.Nodef.kge (CLASSIC)
Yandex	Trojan.GenAsa!duB5ZA74YOI
Ikarus	VirTool.Win32.CeeInject
MaxSecure	Trojan.Malware.1466772.susgen
Fortinet	W32/Generic.AC.233CC9!tr
BitDefenderTheta	AI:Packer.B2868A651F
AVG	Win32:Agent-AECE [Trj]
Cybereason	malicious.a19709
Panda	Trj/Genetic.gen

How to remove VirTool:Win32/Injector!R?

VirTool:Win32/Injector!R removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X