VirTool:Win32/VBInject!MSR malicious file

The VirTool:Win32/VBInject!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/VBInject!MSR virus can do?

Authenticode signature is invalid
Performs a large number of encryption calls using the same key possibly indicative of ransomware file encryption behavior

How to determine VirTool:Win32/VBInject!MSR?


File Info:
name: 57E20689F7F90C515A8D.mlw
path: /opt/CAPEv2/storage/binaries/04fc0ecb3a582b558baacff126898f7f1d6016421fb2ffb51c218c7a4617537d
crc32: 57DDD2C9
md5: 57e20689f7f90c515a8d2f5cb07629a4
sha1: 603c57fe71f866beaff7d50fa17faabed27811fc
sha256: 04fc0ecb3a582b558baacff126898f7f1d6016421fb2ffb51c218c7a4617537d
sha512: a6c57eb088ea942859784fc6a139775242e18c57721c03e2492a46a585e3f583783694af97ab4315cf3525b9a90e483c8083ffc7b7cc7e16f0a3b30da26ed9d3
ssdeep: 24576:C/3IkyJeb1ZEFIQw3WZ2rQUJJu2STJl4YgV2PVpnkXM:ciYR6TJD6ank
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DB457B31B1B28837C0631B385D6FA7A9A43ABF012A38C88767F15D4C1F796517A293D7
sha3_384: 98802a4b9ad24b700b7f11807ec78f46d07fee5dbd8a548e53289d63403e2d6c39444659d82b8582f8f1fdea013309cc
ep_bytes: eb1066623a432b2b484f4f4b90e99860
timestamp: 2020-07-24 11:38:31

Version Info:
0: [No Data]

VirTool:Win32/VBInject!MSR also known as:

Lionic	Hacktool.Win32.Shellcode.3!c
DrWeb	BackDoor.Rat.281
MicroWorld-eScan	Gen:Variant.Bulz.4167
FireEye	Generic.mg.57e20689f7f90c51
Skyhigh	Artemis!Trojan
McAfee	Artemis!57E20689F7F9
Cylance	unsafe
VIPRE	Gen:Variant.Bulz.4167
Sangfor	Trojan.Win32.CryptInject.MSR
K7AntiVirus	Trojan ( 0056bbdb1 )
Alibaba	Exploit:Win32/Shellcode.e160aed3
K7GW	Trojan ( 0056bbdb1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Bulz.D1047
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.EMTS
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Exploit.Win32.Shellcode.rei
BitDefender	Gen:Variant.Bulz.4167
NANO-Antivirus	Exploit.Win32.Shellcode.hznufy
Avast	Win32:Malware-gen
Tencent	Win32.Exploit.Shellcode.Ozfl
Emsisoft	Gen:Variant.Bulz.4167 (B)
F-Secure	Heuristic.HEUR/AGEN.1368316
Zillya	Exploit.Shellcode.Win32.12
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
Jiangmin	Exploit.ShellCode.aje
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1368316
Antiy-AVL	Trojan[Exploit]/Win32.ShellCode
Xcitium	Malware@#1i4bb3fjl4qp7
Microsoft	VirTool:Win32/VBInject!MSR
ZoneAlarm	Exploit.Win32.Shellcode.rei
GData	Gen:Variant.Bulz.4167
Google	Detected
VBA32	Malware-Cryptor.Trac
ALYac	Gen:Variant.Bulz.4167
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.2456345238
Panda	Trj/GdSda.A
Rising	Backdoor.Remcos!8.B89E (TFE:6:KNHo0wfXCOI)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.EPOY!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove VirTool:Win32/VBInject!MSR?

VirTool:Win32/VBInject!MSR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X