Adware.Graftor.249802 information

The Adware.Graftor.249802 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Graftor.249802 virus can do?

Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Generates some ICMP traffic
Anomalous binary characteristics

Related domains:

ad.qqfarmer.com.cn

bakad.qqfarmer.com.cn

How to determine Adware.Graftor.249802?


File Info:
crc32: D2AD23EB
md5: f70f6656b9bb075d42d050efdbd941b0
name: F70F6656B9BB075D42D050EFDBD941B0.mlw
sha1: 70f603ddc6bc839b0b1c2e881a53a2e91b55997d
sha256: ac81bf7666dc57d59298aab12caf350e4bdfa6dc8c2987f21a6f845fe7dc4fea
sha512: 4b2655f461546a9ffea103fa2a09009ee60aee6fc1930bbc74fe01516badd96f85f19d8d05fb2499fce0b38f4d9a50ca816ebfa1386578d92ee776721a60bd82
ssdeep: 24576:/O10p0T1yJUaihtW6xLmzkAo2pDBMABO3/lsS0XjpppIRT6XYLtl9fgxfjTw8DG:E0pmiUKIR2ZBcsSygq0tAtNxf00aR
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: www.QQHelper.net
InternalName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624b
FileVersion: 1.4.0.802
CompanyName: www.QQHelper.net
LegalTrademarks: www.QQHelper.net
ProductName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624b
ProductVersion: 1.0.0.0
FileDescription: QQx519cx7267x9910x4e09x5408x4e00x52a9x624b
OriginalFilename: QQHelper.exe
Translation: 0x0804 0x03a8

Adware.Graftor.249802 also known as:

K7AntiVirus	Adware ( 004cfa2e1 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Siggen14.63642
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Adware.Graftor.249802
Cylance	Unsafe
Zillya	Trojan.Valcaryx.Win32.86
Sangfor	PUP.Win32.Delf.NAF
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	AdWare:Win32/TScope.fd321b57
K7GW	Adware ( 004cfa2e1 )
Cybereason	malicious.6b9bb0
Cyren	W32/Hupigon.CG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Adware.Delf.NAF
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Adware.Graftor.249802
NANO-Antivirus	Trojan.Win32.Delf.fbjhbc
MicroWorld-eScan	Gen:Variant.Adware.Graftor.249802
Tencent	Malware.Win32.Gencirc.10bb5f7e
Ad-Aware	Gen:Variant.Adware.Graftor.249802
Sophos	QQHelper (PUA)
Comodo	ApplicUnwnt@#3deitp618a4kx
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	PUP-XFW-YM
FireEye	Gen:Variant.Adware.Graftor.249802
Emsisoft	Gen:Variant.Adware.Graftor.249802 (B)
Jiangmin	Trojan.Valcaryx.v
Avira	HEUR/AGEN.1129352
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.343EB39
Microsoft	PWS:Win32/Zbot!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Graftor
GData	Gen:Variant.Adware.Graftor.249802
AhnLab-V3	Unwanted/Win32.HackTool.R119402
McAfee	Artemis!F70F6656B9BB
MAX	malware (ai score=99)
VBA32	TScope.Trojan.Delf
Malwarebytes	Adware.QQHelper
Panda	Generic Suspicious
Yandex	Trojan.GenAsa!5yt+/oNnurI
MaxSecure	Virus.W32.VB.K
Fortinet	Riskware/Delf
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Adware.Graftor.249802?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Adware.Graftor.249802 information