Categories: Malware

VirTool:Win32/VBInject.AFI removal tips

The VirTool:Win32/VBInject.AFI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/VBInject.AFI virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Detects Avast Antivirus through the presence of a library
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine VirTool:Win32/VBInject.AFI?


File Info:
crc32: 79C50CC1md5: 74ee62700af99e2fc60668a2a1fc0665name: 74EE62700AF99E2FC60668A2A1FC0665.mlwsha1: d0d58710f39a1f45e90c4199be47969d5bc91778sha256: 6025c7dde40ce0eed6d75b3da02c8c706e49d5f79aeee028437fbbeb0a58f3a5sha512: 07550c5396236e65fbefdeb756679e86b8eba6ab58fca620d17c4b34c184d12df8f5af24cd35a77e1a588538e43e9ae7fedc812eee38387cd0cf8034b919aa03ssdeep: 6144:IGKm5emUiQgKLZsOSqAGPhBoUZClbbfP187bMZviR5FeHrnx4:y1m3IZfxMUobXqMcg7x4type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Version Info:
0: [No Data]

VirTool:Win32/VBInject.AFI also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jaik.9145
FireEye	Generic.mg.74ee62700af99e2f
McAfee	GenericR-EZO!74EE62700AF9
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Cryakl.j!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055e3991 )
BitDefender	Gen:Variant.Jaik.9145
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.00af99
BitDefenderTheta	Gen:NN.ZevbaF.34608.wiZfampu@pni
Symantec	Ransom.Enciphered
ESET-NOD32	a variant of Win32/Injector.CLGC
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Crypmod-9794981-0
Kaspersky	Trojan-Ransom.Win32.Cryakl.ado
Alibaba	Ransom:Win32/Cryakl.b727930c
NANO-Antivirus	Trojan.Win32.Cryakl.dygfyr
Rising	Ransom.Cryakl!8.560 (CLOUD)
Ad-Aware	Gen:Variant.Jaik.9145
Sophos	Mal/Generic-S
Comodo	Malware@#2y1hdvj0zb2vg
DrWeb	Trojan.Encoder.567
Zillya	Trojan.Cryakl.Win32.206
TrendMicro	Ransom_CRYPICH.E
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Emsisoft	Gen:Variant.Jaik.9145 (B)
Ikarus	Trojan-Ransom.CTBLocker
Avira	HEUR/AGEN.1119047
Microsoft	VirTool:Win32/VBInject.AFI
Arcabit	Trojan.Jaik.D23B9
ZoneAlarm	Trojan-Ransom.Win32.Cryakl.ado
GData	Gen:Variant.Jaik.9145
Cynet	Malicious (score: 100)
VBA32	Hoax.Cryakl
ALYac	Gen:Variant.Jaik.9145
MAX	malware (ai score=84)
Malwarebytes	Malware.Heuristic.1001
Panda	Generic Suspicious
TrendMicro-HouseCall	Ransom_CRYPICH.E
Tencent	Win32.Trojan.Cryakl.Ajmc
Yandex	Trojan.Cryakl!pMubcWmhqlE
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Injector.CLDS!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	Win32/Ransom.Criakl.HgIASOUA