Categories: Adware

Adware.Graftor.249802 information

The Adware.Graftor.249802 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Graftor.249802 virus can do?

Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Generates some ICMP traffic
Anomalous binary characteristics

Related domains:

ad.qqfarmer.com.cn

bakad.qqfarmer.com.cn

How to determine Adware.Graftor.249802?


File Info:
crc32: D2AD23EBmd5: f70f6656b9bb075d42d050efdbd941b0name: F70F6656B9BB075D42D050EFDBD941B0.mlwsha1: 70f603ddc6bc839b0b1c2e881a53a2e91b55997dsha256: ac81bf7666dc57d59298aab12caf350e4bdfa6dc8c2987f21a6f845fe7dc4feasha512: 4b2655f461546a9ffea103fa2a09009ee60aee6fc1930bbc74fe01516badd96f85f19d8d05fb2499fce0b38f4d9a50ca816ebfa1386578d92ee776721a60bd82ssdeep: 24576:/O10p0T1yJUaihtW6xLmzkAo2pDBMABO3/lsS0XjpppIRT6XYLtl9fgxfjTw8DG:E0pmiUKIR2ZBcsSygq0tAtNxf00aRtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: www.QQHelper.netInternalName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bFileVersion: 1.4.0.802CompanyName: www.QQHelper.netLegalTrademarks: www.QQHelper.netProductName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bProductVersion: 1.0.0.0FileDescription: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bOriginalFilename: QQHelper.exeTranslation: 0x0804 0x03a8

Adware.Graftor.249802 also known as:

K7AntiVirus	Adware ( 004cfa2e1 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Siggen14.63642
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Adware.Graftor.249802
Cylance	Unsafe
Zillya	Trojan.Valcaryx.Win32.86
Sangfor	PUP.Win32.Delf.NAF
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	AdWare:Win32/TScope.fd321b57
K7GW	Adware ( 004cfa2e1 )
Cybereason	malicious.6b9bb0
Cyren	W32/Hupigon.CG.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Adware.Delf.NAF
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Adware.Graftor.249802
NANO-Antivirus	Trojan.Win32.Delf.fbjhbc
MicroWorld-eScan	Gen:Variant.Adware.Graftor.249802
Tencent	Malware.Win32.Gencirc.10bb5f7e
Ad-Aware	Gen:Variant.Adware.Graftor.249802
Sophos	QQHelper (PUA)
Comodo	ApplicUnwnt@#3deitp618a4kx
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	PUP-XFW-YM
FireEye	Gen:Variant.Adware.Graftor.249802
Emsisoft	Gen:Variant.Adware.Graftor.249802 (B)
Jiangmin	Trojan.Valcaryx.v
Avira	HEUR/AGEN.1129352
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.343EB39
Microsoft	PWS:Win32/Zbot!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Graftor
GData	Gen:Variant.Adware.Graftor.249802
AhnLab-V3	Unwanted/Win32.HackTool.R119402
McAfee	Artemis!F70F6656B9BB
MAX	malware (ai score=99)
VBA32	TScope.Trojan.Delf
Malwarebytes	Adware.QQHelper
Panda	Generic Suspicious
Yandex	Trojan.GenAsa!5yt+/oNnurI
MaxSecure	Virus.W32.VB.K
Fortinet	Riskware/Delf
AVG	Win32:Malware-gen
Paloalto	generic.ml