Should I remove “VirTool:Win32/VBInject!IK”?

The VirTool:Win32/VBInject!IK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/VBInject!IK virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid

How to determine VirTool:Win32/VBInject!IK?


File Info:
name: B77689C05531A21B3724.mlw
path: /opt/CAPEv2/storage/binaries/9d7280de779d8f16a94499ba02825a3c80e48ae753b0b341764d6ea03fd5b45b
crc32: 30B1A51B
md5: b77689c05531a21b3724a4482d01a45c
sha1: 4dd8b864206d299ac956d9d6e08ed7d10aaf3cf6
sha256: 9d7280de779d8f16a94499ba02825a3c80e48ae753b0b341764d6ea03fd5b45b
sha512: e543850233deb5cec5c398f45253317552daf11696ddf940777d41f6442159c7ccaa0a90aaf57284fd769d2120d8e0d9f43950ff74f58eb8a3d280116e4cad6a
ssdeep: 6144:Suu9OrkgY/x3BWAnoikByTNr42Thc1YNp36E5lyvVNBDx7jCvbZcd:SugOwgK3HK16NpV5lyNNVx7j6bZcd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1764401167F9FA731F4344776124625A080377F3039828A05DB25BB2DF9B1BC26B6970B
sha3_384: 166767877e8b265f642d59c32fe4c5428ee64f622c265db41039556bceab32f680cf0f8df18d2da68e2b1514282625be
ep_bytes: 688c164000e8f0ffffff000000000000
timestamp: 2011-09-15 10:08:48

Version Info:
0: [No Data]

VirTool:Win32/VBInject!IK also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lsPq
AVG	Win32:VBCrypt-YM [Trj]
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.pmZ@s1uwx0fau
FireEye	Generic.mg.b77689c05531a21b
Skyhigh	BehavesLike.Win32.Generic.dc
McAfee	GenericRXCP-QF!B77689C05531
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 003021441 )
K7GW	Trojan ( 003021441 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	AI:Packer.BD2671201D
VirIT	Trojan.Win32.Generic.AGCH
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.JJE
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Dropper.XtremeRAT-9957499-0
Kaspersky	Trojan.Win32.Scarsi.tww
BitDefender	Gen:Trojan.Heur.pmZ@s1uwx0fau
NANO-Antivirus	Trojan.Win32.Jorik.cojbmp
Avast	Win32:VBCrypt-YM [Trj]
Tencent	Malware.Win32.Gencirc.114ac4da
Emsisoft	Gen:Trojan.Heur.pmZ@s1uwx0fau (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.VbCrypt.250
VIPRE	Gen:Trojan.Heur.pmZ@s1uwx0fau
Sophos	Mal/Generic-S
Ikarus	Trojan-Dropper
Jiangmin	Trojan/Jorik.acjz
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Llac
Kingsoft	malware.kb.a.1000
Microsoft	VirTool:Win32/VBInject.gen!IK
Xcitium	TrojWare.Win32.Injector.AMXL@52ezih
Arcabit	Trojan.Heur.E13E2D
ViRobot	Trojan.Win32.A.Siscos.45088
ZoneAlarm	Trojan.Win32.Scarsi.tww
GData	Gen:Trojan.Heur.pmZ@s1uwx0fau
Google	Detected
AhnLab-V3	Trojan/Win32.Jorik.R15120
VBA32	Trojan.Llac
ALYac	Gen:Trojan.Heur.pmZ@s1uwx0fau
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
Rising	Worm.VBInjectEx!1.99E6 (CLASSIC)
Yandex	Trojan.Injector!5bOmi2gbUyY
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.2910151.susgen
Fortinet	W32/VBInjector.W!tr
Cybereason	malicious.4206d2
DeepInstinct	MALICIOUS

How to remove VirTool:Win32/VBInject!IK?

VirTool:Win32/VBInject!IK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X