Should I remove “Adware.Graftor.202302 (B)”?

The Adware.Graftor.202302 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Graftor.202302 (B) virus can do?

Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Adware.Graftor.202302 (B)?


File Info:
name: BBE5C84C3CB9C897F35C.mlw
path: /opt/CAPEv2/storage/binaries/1bcbe530ba4d2bd7db11c9db9dea7b6869c91e13a55ed878f6a54292918bcd32
crc32: 4098E71C
md5: bbe5c84c3cb9c897f35cdf74d1747006
sha1: bc095b9cf5b080dd1f97ccebe1a2138f81fba4f2
sha256: 1bcbe530ba4d2bd7db11c9db9dea7b6869c91e13a55ed878f6a54292918bcd32
sha512: 11f196564c5b8c02e96552c8868441f5f8f2672a6fd951a7e363b53f34d55398deb2a6ee36cee91a115c8abd6d0f875b4b2573e3c85ab3bc82084aa485d3ac23
ssdeep: 6144:EI7W3qOgnK+p3LOWEyTlA0JhFJkeQx37Q+PxmJm8qM6iv0QgqyVmuHzXEzEy:EI7WaOgnKI3CWEyDjkT77x4m8qM6iv06
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B7848D12B704F032C4130171AE26A37A967DB8716B398187B3D85F6DEEB16D27939B43
sha3_384: a96cd2f42478fafc6af11eaac6934b1f4e8364045f890c926ac06d51040f9b6868103bfdb661d38285f90ab120721ae8
ep_bytes: e88a5c0000e979feffffcccccc833d50
timestamp: 2016-02-24 14:50:02

Version Info:
0: [No Data]

Adware.Graftor.202302 (B) also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Adware.Graftor.202302
FireEye	Generic.mg.bbe5c84c3cb9c897
McAfee	PUP-XGD-QK
Malwarebytes	LoadMoney.Adware.Bundler.DDS
VIPRE	Gen:Variant.Adware.Graftor.202302
CrowdStrike	win/grayware_confidence_90% (D)
Cyren	W32/Loadmoney.BA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Adware.LoadMoney.AWD
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Adware.Graftor.202302
NANO-Antivirus	Trojan.Win32.LMN.eawosq
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.LoadMoney.1323
Zillya	Adware.LoadMoney.Win32.74415
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.fh
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Adware.Graftor.202302 (B)
Ikarus	Virus.Win32.Cryptor
GData	Gen:Variant.Adware.Graftor.202302
Jiangmin	Downloader.LMN.qq
Antiy-AVL	RiskWare[Downloader]/Win32.LMN
Arcabit	Trojan.Adware.Graftor.D3163E
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Adware/Win.Graftor.R553269
ALYac	Gen:Variant.Adware.Graftor.202302
MAX	malware (ai score=67)
VBA32	TScope.Malware-Cryptor.SB
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Occamy!8.F1CD (TFE:5:7fLRig5NFmO)
Yandex	Trojan.GenAsa!JAr3G2O2tGc
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/LoadMoney.AWD

How to remove Adware.Graftor.202302 (B)?

Adware.Graftor.202302 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X