Win32:Inject-ABT [Trj] information

The Win32:Inject-ABT [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Inject-ABT [Trj] virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Inject-ABT [Trj]?


File Info:
name: CE9714C6E643A9A51215.mlw
path: /opt/CAPEv2/storage/binaries/9281a421fdc24447ecebfcf791a3b154d146f2424854e0d85f573ef915533081
crc32: 172B86EB
md5: ce9714c6e643a9a5121502d64c6fe5b5
sha1: b69a25ce3e315d228800023c8db92e03556f63ac
sha256: 9281a421fdc24447ecebfcf791a3b154d146f2424854e0d85f573ef915533081
sha512: 73e7785a37b669b4737716118d602dce959d861d52164d429897a36c62490197f3f8462cc757818f06b54da96814ddbe6fe67652617a8667845477a1efc30d01
ssdeep: 49152:KYxS103SdCHxDIvu930jdNiWehv52Ubneaz715NqS1Pkzuk:Kgmq3V0DC5P3l5Nqgs9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14EA5337A2AD8D40EC955D835CB72D7D43A10E78BBF1C1F5D265A1A905838CA12D3ECB3
sha3_384: f2ecf5b26b8e8ce029015f57681e12c2543e4a1786d76d4168fbe6c2a249c130ef08a9bd0211a310cc8cedb37acd47b7
ep_bytes: 680c124000e8eeffffff000000000000
timestamp: 2009-08-02 20:04:21

Version Info:
CompanyName: 
ProductName: 
FileVersion: 
ProductVersion: 
InternalName: 
OriginalFilename: 
Translation: 0x0409 0x04b0

Win32:Inject-ABT [Trj] also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Jaik.26012
ALYac	Gen:Variant.Jaik.26012
Cylance	Unsafe
Sangfor	VISUAL BASIC4
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Jaik.26012
Cyren	W32/Trojan.IJXV-6813
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Spy.Zbot.NJ
APEX	Malicious
ClamAV	Win.Trojan.Zbot-7065
Kaspersky	Worm.Win32.VBNA.b
Rising	Trojan.Spy.Win32.Zbot.fre (CLASSIC)
Ad-Aware	Gen:Variant.Jaik.26012
Emsisoft	Gen:Variant.Jaik.26012 (B)
Comodo	TrojWare.Win32.Spy.Zbot.NJ3@1r3afr
DrWeb	Trojan.Spambot.4615
Zillya	Trojan.Zbot.Win32.7419
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.ce9714c6e643a9a5
Sophos	ML/PE-A + Mal/VBDrop-G
Ikarus	Trojan-Spy.Win32.Zbot
GData	Gen:Variant.Jaik.26012
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.F400B7
ZoneAlarm	Worm.Win32.VBNA.b
Microsoft	VirTool:Win32/VBInject.DS
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Buzus.R3251
Acronis	suspicious
MAX	malware (ai score=82)
Malwarebytes	Malware.AI.2892063539
Yandex	Trojan.GenAsa!ghpj5FlhK0k
SentinelOne	Static AI – Malicious PE
Fortinet	W32/VBObfus.C!tr
BitDefenderTheta	AI:Packer.2D49AF231F
AVG	Win32:Inject-ABT [Trj]
Cybereason	malicious.6e643a
Avast	Win32:Inject-ABT [Trj]

How to remove Win32:Inject-ABT [Trj]?

Win32:Inject-ABT [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X