VirTool:WinNT/Vanti

By Sumo3000 in Trojans

Translate To:

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	956

First Seen:	November 30, 2010
Last Seen:	May 12, 2022
OS(es) Affected:	Windows

VirTool:WinNT/Vanti is a detection for a packer that is often used by password stealing Trojans or rootkits. When inside a machine, VirTool:WinNT/Vanti will alter the firewall settings to avoid detection. VirTool:WinNT/Vanti may also drop harmful Trojans making the system even more vulnerable. VirTool:WinNT/Vanti is a threat that should not be ignored but removed promptly.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	VB.AOCE
Fortinet	W32/Generic
Ikarus	Rootkit
AhnLab-V3	Trojan/Win32.Llac
Microsoft	Backdoor:Win32/Nuclear
Antiy-AVL	Trojan/MSIL.Agent.gen
eTrust-Vet	Win32/Fignotok.NY
Sophos	Troj/Mdrop-DJI
AntiVir	TR/PSW.Agent.agf
DrWeb	Trojan.DownLoader4.56255
Comodo	UnclassifiedMalware
BitDefender	Trojan.Generic.5359160
Kaspersky	Trojan-PSW.MSIL.Agent.cxy
eSafe	Win32.TRPSW.Agent.Ag
Avast	MSIL:Agent-AH [Trj]

SpyHunter Detects & Remove VirTool:WinNT/Vanti

File System Details

VirTool:WinNT/Vanti may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	apiqq.exe	a72c32981e9122043e6e25b14ff3d2f9	55
Name: apiqq.exe MD5: a72c32981e9122043e6e25b14ff3d2f9 Size: 156.67 KB (156672 bytes) Detections: 55 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: December 1, 2010
2.	mgking.exe	72158f6d1ee708e44cce708df82136df	40
Name: mgking.exe MD5: 72158f6d1ee708e44cce708df82136df Size: 177.66 KB (177664 bytes) Detections: 40 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: November 7, 2019
3.	svrwsc.exe	6302b0e6cdd8c97b370413e3d6c26cf9	35
Name: svrwsc.exe MD5: 6302b0e6cdd8c97b370413e3d6c26cf9 Size: 62.97 KB (62976 bytes) Detections: 35 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 1, 2010
4.	et3ypes.exe	55ad464ce88b77af1e3682bcfce7b169	29
Name: et3ypes.exe MD5: 55ad464ce88b77af1e3682bcfce7b169 Size: 177.66 KB (177664 bytes) Detections: 29 Type: Executable File Path: C:\soft-wares\umbuntu\et3ypes.exe Group: Malware file Last Updated: March 20, 2021
5.	comsrvr.exe	7aa091e79d5d57fa3a085168e0ba5198	26
Name: comsrvr.exe MD5: 7aa091e79d5d57fa3a085168e0ba5198 Size: 37.37 KB (37376 bytes) Detections: 26 Type: Executable File Path: %WINDIR%\system32\msapps Group: Malware file Last Updated: December 1, 2010
6.	mgking.exe	4f0329c85a4511d0ce11e420552f0b3b	25
Name: mgking.exe MD5: 4f0329c85a4511d0ce11e420552f0b3b Size: 174.59 KB (174592 bytes) Detections: 25 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 25, 2020
7.	kroover.exe	4f416f97722bd84aba89323e2ba5310f	24
Name: kroover.exe MD5: 4f416f97722bd84aba89323e2ba5310f Size: 161.79 KB (161792 bytes) Detections: 24 Type: Executable File Path: %WINDIR%\system32\drivers Group: Malware file Last Updated: December 1, 2010
8.	svrwsc.exe	29fbb7ce21f5de37491cf368ea5cb16f	23
Name: svrwsc.exe MD5: 29fbb7ce21f5de37491cf368ea5cb16f Size: 66.56 KB (66560 bytes) Detections: 23 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 1, 2010
9.	sysqgv32.exe	a03dc5470902b5f102292506bc300be8	21
Name: sysqgv32.exe MD5: a03dc5470902b5f102292506bc300be8 Size: 27.13 KB (27136 bytes) Detections: 21 Type: Executable File Path: %USERPROFILE%\Start Menu\Programs\Startup Group: Malware file Last Updated: December 1, 2010
10.	translateclient.exe	9398a3c4eeb626a8eaea9fb2d4c85e33	17
Name: translateclient.exe MD5: 9398a3c4eeb626a8eaea9fb2d4c85e33 Size: 2.54 MB (2541568 bytes) Detections: 17 Type: Executable File Path: C:\Program Files (x86)\Translate Client\FoxYou.NeT.Client for Google Translate v 5.0.510 Pro\crack\translateclient.exe Group: Malware file Last Updated: May 12, 2022
11.	mgking.exe	c5cda622d16d05b3b7ae69e315e7a2a9	15
Name: mgking.exe MD5: c5cda622d16d05b3b7ae69e315e7a2a9 Size: 175.61 KB (175616 bytes) Detections: 15 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: May 25, 2020
12.	efd2e334.exe	75c29c64104af7220c0af04a3719cf7f	14
Name: efd2e334.exe MD5: 75c29c64104af7220c0af04a3719cf7f Size: 60.41 KB (60416 bytes) Detections: 14 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 1, 2010
13.	9keibj.exe	5e286f8d496d59ca01d9966f95ec499c	13
Name: 9keibj.exe MD5: 5e286f8d496d59ca01d9966f95ec499c Size: 153.08 KB (153088 bytes) Detections: 13 Type: Executable File Path: C:\Users\<username>\Desktop\APP1\1 PROGRAMAS\PROGRAMAS\TARJETA MEMORIA\9keibj.exe Group: Malware file Last Updated: December 13, 2021
14.	mcastmib32.dll	a32f5afd77352a7704b9bdaff12b73b2	11
Name: mcastmib32.dll MD5: a32f5afd77352a7704b9bdaff12b73b2 Size: 257.53 KB (257536 bytes) Detections: 11 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: December 1, 2010
15.	syscr.exe	7c84593101eeb345bc6fb74bf141ba88	9
Name: syscr.exe MD5: 7c84593101eeb345bc6fb74bf141ba88 Size: 94.2 KB (94208 bytes) Detections: 9 Type: Executable File Path: C:\RECYCLER\S-1-5-21-0451483379-7002450902-581502230-4016 Group: Malware file Last Updated: December 1, 2010
16.	m.2CE65.tmp.exe	8dd9dee2a8454c23b1aec03335880edd	8
Name: m.2CE65.tmp.exe MD5: 8dd9dee2a8454c23b1aec03335880edd Size: 30.2 KB (30208 bytes) Detections: 8 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: December 1, 2010
17.	mshoeupl.dll	cac47e363d59f444e5aa87c5e2e71cf8	7
Name: mshoeupl.dll MD5: cac47e363d59f444e5aa87c5e2e71cf8 Size: 87.04 KB (87040 bytes) Detections: 7 Type: Dynamic link library Path: %WINDIR% Group: Malware file Last Updated: December 1, 2010
18.	wowst.exe	3cecd4c993860b62b8f1ea3c09403415	6
Name: wowst.exe MD5: 3cecd4c993860b62b8f1ea3c09403415 Size: 175.61 KB (175616 bytes) Detections: 6 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: November 30, 2010
19.	mgking.exe	f3cd22d2c42c7051981aeb8932a9265b	5
Name: mgking.exe MD5: f3cd22d2c42c7051981aeb8932a9265b Size: 175.1 KB (175104 bytes) Detections: 5 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: November 30, 2010
20.	svckost.exe	21ff488c18263a598f282c290105b3e1	4
Name: svckost.exe MD5: 21ff488c18263a598f282c290105b3e1 Size: 217.08 KB (217088 bytes) Detections: 4 Type: Executable File Path: %TEMP%\Ali Acet\2.5.0.0 Group: Malware file Last Updated: December 1, 2010
21.	941546.exe	b6fc774a85a45890e4ae7e6bbb9896db	3
Name: 941546.exe MD5: b6fc774a85a45890e4ae7e6bbb9896db Size: 357.37 KB (357376 bytes) Detections: 3 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: December 1, 2010
22.	sbshgr.dll	868dd8a2adc65b38c260ff1a53752727	3
Name: sbshgr.dll MD5: 868dd8a2adc65b38c260ff1a53752727 Size: 83.96 KB (83968 bytes) Detections: 3 Type: Dynamic link library Path: %LOCALAPPDATA% Group: Malware file Last Updated: December 1, 2010
23.	IEXPLORE.exe	a622c3424236dba38f135438626f0476	3
Name: IEXPLORE.exe MD5: a622c3424236dba38f135438626f0476 Size: 198.65 KB (198656 bytes) Detections: 3 Type: Executable File Path: %ALLUSERSPROFILE%\Start Menu\Programs\Startup Group: Malware file Last Updated: April 29, 2013
24.	HPALin.dll	b1536a270aa96e968fe231076dcf76bc	2
Name: HPALin.dll MD5: b1536a270aa96e968fe231076dcf76bc Size: 88.06 KB (88064 bytes) Detections: 2 Type: Dynamic link library Path: %WINDIR% Group: Malware file Last Updated: December 1, 2010
25.	delkotrtsbl.exe	4b8cf511871e53c7525cc27a64cbae0a	2
Name: delkotrtsbl.exe MD5: 4b8cf511871e53c7525cc27a64cbae0a Size: 240.64 KB (240640 bytes) Detections: 2 Type: Executable File Path: %TEMP%\aunndgifo Group: Malware file Last Updated: December 1, 2010
26.	mcratl4S.dll	94d6fd34acafc973fca16ed2034fdf2e	1
Name: mcratl4S.dll MD5: 94d6fd34acafc973fca16ed2034fdf2e Size: 76.28 KB (76288 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR% Group: Malware file Last Updated: December 6, 2010
27.	risabc.exe	0aedc6c4a3b431ceb416e59a74a294ff	1
Name: risabc.exe MD5: 0aedc6c4a3b431ceb416e59a74a294ff Size: 267.26 KB (267264 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 21, 2010
28.	sstqnk.dll	2b9fad2e9a3b624ca030e3c2a57bca72	1
Name: sstqnk.dll MD5: 2b9fad2e9a3b624ca030e3c2a57bca72 Size: 109.05 KB (109056 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: December 1, 2010

More files

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

VirTool:WinNT/Vanti

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove VirTool:WinNT/Vanti

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen