Categories: Adware

Adware.Graftor.176518 removal

The Adware.Graftor.176518 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Graftor.176518 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Checks for the presence of known windows from debuggers and forensic tools
Attempted to write directly to a physical drive
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Adware.Graftor.176518?


File Info:
name: 129CF5200C758E7BD85A.mlwpath: /opt/CAPEv2/storage/binaries/64886ba2f0c441596f49aed7594b45ee6848de840ef0ef24918a67b97123bc98crc32: 068C21CBmd5: 129cf5200c758e7bd85a28ceee86776dsha1: e13b1a10f759a94043d5e3138a12eeda1dedfae0sha256: 64886ba2f0c441596f49aed7594b45ee6848de840ef0ef24918a67b97123bc98sha512: ca311669745e678c11a57662fc7292b9c3d43ccc49c1f841b351ef4693459d9ac4aa3ceb2ec971c775d20e9678c47007852506ffa58b3521cfc8128035246e91ssdeep: 24576:UyBNbMblbOsYpNehjLR/SV9T1hqOuZCxsx7Nf:lQliJjkR/SV9T1IfZCxcZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D7258CD87746C17BC57211B21E3DABAF582EBD604B5914C7E2C82B7E58B08C14F32A5Bsha3_384: 83b03b52881cfc42a5d9f4b5c17048d3c1b790d7ced0b722cee386bef6bb0934a5dfb87b3461b728df7c12062241c7e0ep_bytes: e892560000e97ffeffff51c7011ca548timestamp: 2015-04-12 06:43:24
Version Info:
CompanyName: InstallerFileDescription: InstallerFileVersion: 1.51.0.0InternalName: setup.exeLegalCopyright: Copyright (C) 2015OriginalFilename: setup.exeProductName: InstallerProductVersion: 1.51.0.0Translation: 0x0409 0x04b0

Adware.Graftor.176518 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Adware.Downware.10890
MicroWorld-eScan	Gen:Variant.Adware.Graftor.176518
CAT-QuickHeal	Trojan.MauvaiseRI.S5244666
Skyhigh	PUP-FUS
McAfee	PUP-FUS
Cylance	unsafe
Zillya	Adware.TrueDownloader.Win32.9
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.00c758
Arcabit	Trojan.Adware.Graftor.D2B186
VirIT	Adware.Win32.Downware.10670, i
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Adware.TrueDownloader.A
APEX	Malicious
ClamAV	Win.Adware.Agent-1275540
Kaspersky	not-a-virus:Downloader.Win32.Agent.dkcd
BitDefender	Gen:Variant.Adware.Graftor.176518
NANO-Antivirus	Trojan.Win32.Agent.dqjhqg
Avast	Win32:AdwareX-gen [Adw]
Tencent	Malware.Win32.Gencirc.10b78def
Emsisoft	Gen:Variant.Adware.Graftor.176518 (B)
F-Secure	Adware.ADWARE/TrueDownld.Gen
Baidu	Win32.Adware.TrueDownloader.a
VIPRE	Gen:Variant.Adware.Graftor.176518
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.129cf5200c758e7b
Sophos	Generic ML PUA (PUA)
Ikarus	PUA.TrueDownloader
Jiangmin	Downloader.Agent.mgw
Google	Detected
Avira	ADWARE/TrueDownld.Gen
Varist	W32/S-56a1ffd0!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Agent.dkcd
Xcitium	Application.Win32.TrueDownloader.A@6l0zts
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	not-a-virus:Downloader.Win32.Agent.dkcd
GData	Gen:Variant.Adware.Graftor.176518
Cynet	Malicious (score: 100)
AhnLab-V3	Adware/Win32.TrueDownloader.R144539
VBA32	Downloader.Agent
ALYac	Gen:Variant.Adware.Graftor.176518
MAX	malware (ai score=62)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.DL.Win32.Exp10.b (CLASSIC)
Yandex	Trojan.GenAsa!3RSCmsPi94o
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Mikey.2625!tr
AVG	Win32:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)