Categories: Adware

Adware.Graftor.290828 removal instruction

The Adware.Graftor.290828 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Adware.Graftor.290828 virus can do?

  • Presents an Authenticode digital signature
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization

Related domains:

z.whorecord.xyz
a.tomx.xyz
query.run456.com
stat.run456.com

How to determine Adware.Graftor.290828?



File Info:

crc32: 13FAEC76md5: 636403c0bab70c5e196d8ac598fb6d2fname: Gamestart.exesha1: 1d4df6876fdc5d2b53d4a0f1cc50aca4a87bf28asha256: 3f1110e1f78ff2f1a983ad893d3c7838da8048485d3af97e7d068433d0705359sha512: b8f3b3d4f3b7d7f1c0675c9dc48790ef8005ffd9e7819b363651585f3fa4b12f4eadd4c616e8ff0f2b667d691cdf68baaced1e60e7589c4ab587b12083dfb8a6ssdeep: 24576:XgK5mTqk8oIWwHZSlioOKKhuwx0gPTvufUbZ1YOtLlqfUY/48jRT+JLlkESmiyCc:wzc1Lpuwx0mZGMEUY/48jRTqL2ESnWtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2015InternalName: x6e38x620fx5b89x88c5x7a0bx5e8fFileVersion: 2.3.0.302ProductName: x6e38x620fx5b89x88c5x7a0bx5e8fProductVersion: 2.3.0.302FileDescription: x6e38x620fx5b89x88c5x7a0bx5e8fOriginalFilename: setup.exeTranslation: 0x0804 0x04b0

Adware.Graftor.290828 also known as:

MicroWorld-eScan Gen:Variant.Adware.Graftor.290828
FireEye Generic.mg.636403c0bab70c5e
McAfee PUP-XIS-AF
ALYac Gen:Variant.Adware.Graftor.290828
Cylance Unsafe
VIPRE Adware.Win32.Kuaiba
Sangfor Malware
K7AntiVirus Adware ( 005524301 )
BitDefender Gen:Variant.Adware.Graftor.290828
K7GW Adware ( 005524301 )
Cybereason malicious.0bab70
TrendMicro TROJ_GEN.R002C0PJ119
Symantec Trojan.Gen.2
Paloalto generic.ml
GData Gen:Variant.Adware.Graftor.290828
Kaspersky not-a-virus:AdWare.Win32.Kuaiba.bqd
Alibaba AdWare:Win32/Kuaiba.1e4211a8
NANO-Antivirus Riskware.Win32.Kuaiba.etpotu
ViRobot Adware.Kuaiba.1703832
AegisLab Adware.Win32.Kuaiba.2!c
Avast Win32:Adware-gen [Adw]
Rising Trojan.Generic@ML.80 (RDMK:J/7xWtXVVRCBawIC2SZGEg)
Endgame malicious (high confidence)
Emsisoft Gen:Variant.Adware.Graftor.290828 (B)
Comodo ApplicUnwnt@#36d6eaq70xnd6
F-Secure Adware.ADWARE/Kuaiba.hswfo
DrWeb Trojan.DownLoader25.46822
Zillya Adware.KuaibaCRTD.Win32.960
Invincea heuristic
McAfee-GW-Edition PUP-XIS-AF
Sophos Generic PUA BN (PUA)
Ikarus PUA.Kuaiba
Jiangmin AdWare.Kuaiba.be
Webroot W32.Adware.Gen
Avira ADWARE/Kuaiba.hswfo
MAX malware (ai score=99)
Antiy-AVL GrayWare[AdWare]/Win32.Kuaiba
Arcabit Trojan.Adware.Graftor.D4700C
ZoneAlarm not-a-virus:AdWare.Win32.Kuaiba.bqd
Microsoft PUA:Win32/Kuaiba
AhnLab-V3 PUP/Win32.Generic.R236026
VBA32 AdWare.Kuaiba
Ad-Aware Gen:Variant.Adware.Graftor.290828
ESET-NOD32 a variant of Win32/Adware.Kuaiba.G
TrendMicro-HouseCall TROJ_GEN.R002C0PJ119
Tencent Malware.Win32.Gencirc.10b2b97e
SentinelOne DFI – Suspicious PE
eGambit Unsafe.AI_Score_100%
Fortinet Riskware/Kuaiba
AVG Win32:Adware-gen [Adw]
Panda Trj/CI.A

How to remove Adware.Graftor.290828?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment
Share
Published by
Paul Valéry
Tags: a.tomx.xyzAdware.Graftor.290828query.run456.comstat.run456.comx6e38x620fx5b89x88c5x7a0bx5e8fz.whorecord.xyz
4 years ago

Recent Posts

Zusy.535909 malicious file

The Zusy.535909 is considered dangerous by lots of security experts. When this infection is active,…

4 mins ago

Win32:Agent-AMKL [Drp] (file analysis)

The Win32:Agent-AMKL [Drp] is considered dangerous by lots of security experts. When this infection is…

4 mins ago

Should I remove “Trojan:Win32/Predator.EFG!MTB”?

The Trojan:Win32/Predator.EFG!MTB is considered dangerous by lots of security experts. When this infection is active,…

4 mins ago

How to remove “Razy.357867”?

The Razy.357867 is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

TrojanSpy:Win32/Buhtrap (file analysis)

The TrojanSpy:Win32/Buhtrap is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

PUAAdvertising:Win32/XingSof information

The PUAAdvertising:Win32/XingSof is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago