Categories: Adware

About “Adware.Graftor.17658” infection

The Adware.Graftor.17658 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Graftor.17658 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Attempts to connect to a dead IP:Port (1 unique times)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Terminates another process
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Attempts to modify proxy settings
Harvests cookies for information gathering
Uses suspicious command line tools or Windows utilities

How to determine Adware.Graftor.17658?


File Info:
name: 60DA178D83A96ECACC41.mlwpath: /opt/CAPEv2/storage/binaries/7383364a8de71169c75f6ecbf8a110c268f17a7b1e0b196782a001e84f0a40ebcrc32: 57E7AF40md5: 60da178d83a96ecacc41684364da5bfesha1: 093d7b16b70a0a46bc2c178ad631367bc14b2ebbsha256: 7383364a8de71169c75f6ecbf8a110c268f17a7b1e0b196782a001e84f0a40ebsha512: 82bdc91855d4a520dfdd77a56cb5fbbed59bb53a7829ff787f651b5f03ee884bf0684a43c3ebb8304639931fe39777e05556dea4dd5de1e29b792cc37c26ce95ssdeep: 6144:TWs4jAmDdH+IRCgvTjBT4q65lHioLNLyCx1Cb:TWAmRtHvJ4HvN/x1Ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E1441263BAB181B7E2911175222A4F1AD73EE11053158C8B8FA4A68E7DF0BD3CD37395sha3_384: 539a5c07925763404be6e390797b87526b8c19b7cf759e0191e42c351db69f662362b199820e49d055bdf5f7b8271f94ep_bytes: 558bec6aff6888f24000681888400064timestamp: 1998-05-08 09:14:02
Version Info:
0: [No Data]

Adware.Graftor.17658 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Adware.Graftor.17658
CAT-QuickHeal	W32.Virut.G
ALYac	Gen:Variant.Adware.Graftor.17658
Cylance	Unsafe
VIPRE	Gen:Variant.Adware.Graftor.17658
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Adware ( 004c310f1 )
K7GW	Adware ( 004c310f1 )
Cybereason	malicious.d83a96
Cyren	W32/S-e3cd924a!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.FloodAd.AA
APEX	Malicious
ClamAV	Win.Trojan.Toopu-1
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Adware.Graftor.17658
NANO-Antivirus	Trojan.Win32.Snojan.fdzans
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b0cf7a
Ad-Aware	Gen:Variant.Adware.Graftor.17658
Emsisoft	Gen:Variant.Adware.Graftor.17658 (B)
Comodo	ApplicUnwnt@#10izkiiz3h2a
DrWeb	Trojan.DownLoader26.38659
McAfee-GW-Edition	BehavesLike.Win32.Virut.dc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.60da178d83a96eca
Sophos	Generic PUA AJ (PUA)
Ikarus	Trojan.Win32.Snojan
GData	Gen:Variant.Adware.Graftor.17658
Jiangmin	Trojan.Snojan.aze
Avira	HEUR/Malware
MAX	malware (ai score=62)
Arcabit	Trojan.Adware.Graftor.D44FA
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Cynet	Malicious (score: 100)
McAfee	PUP-XEO-EP
VBA32	Trojan.Snojan
Malwarebytes	Malware.AI.4057444510
Rising	Adware.Flood!1.B2E0 (CLASSIC)
Yandex	Trojan.GenAsa!zOuE555wSf8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Snojan.CEYM!tr
BitDefenderTheta	Gen:NN.ZexaF.34806.qqW@aqwZFgh
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_90% (D)