Categories: Adware

What is “Adware.Graftor.46075”?

The Adware.Graftor.46075 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Graftor.46075 virus can do?

HTTPS urls from behavior.
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Adware.Graftor.46075?


File Info:
name: B999CA090824161E5CFE.mlwpath: /opt/CAPEv2/storage/binaries/f45e00738230160510d482450388dfdf44f646320838bb0b723638dd372642f0crc32: A9A5D9A2md5: b999ca090824161e5cfe2ff5f73ea058sha1: 830b0116cfa68cb3887d5e41814585e8f18d21dfsha256: f45e00738230160510d482450388dfdf44f646320838bb0b723638dd372642f0sha512: 1257883e78a552c35f60c063b4633e3686f5eda19caef0524c23a252776a8ed88e468b4c5efe41d39e81ad6f839c1bb1bb4845a0ef9f93fdad31cf4fa4e22fe4ssdeep: 6144:EQg6R6F9j4z7WHf09RbMOs02+NfOV9ddrFm6UvjaEo+8NfWxU5s1nqSZK3LR:Jg6ZzS89qODdG9ddrILrCfWxwp3LRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11274F15367F64948F6F6A7705DBB06940A29FC9AB976CD0D2010D98E2EB0F40DCA2773sha3_384: 923ddbec281417c1f3d5814083bdd664cdeebfaf341985e185fc97c686112bd72385dbb268eba376ffffe83b51062b98ep_bytes: 60be002048008dbe00f0f7ff5783cdfftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Adware.Graftor.46075 also known as:

Bkav	W32.Common.3BBE70AE
Lionic	Adware.Win32.ForceStartPage.2!c
Elastic	malicious (moderate confidence)
DrWeb	Adware.Downware.335
MicroWorld-eScan	Gen:Variant.Adware.Graftor.46075
FireEye	Generic.mg.b999ca090824161e
CAT-QuickHeal	HackTool.Injectxin.A8
ALYac	Gen:Variant.Adware.Graftor.46075
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Adware.ForceStartPage.Win32.1
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 003bb3161 )
Alibaba	AdWare:Win32/ForceStartPage.bcfcbfeb
K7GW	Trojan ( 003bb3161 )
BitDefenderTheta	Gen:NN.ZelphiF.36804.wmGfa48tm9oc
VirIT	Adware.Generic5.FUD
Symantec	SMG.Heur!gen
ESET-NOD32	Win32/DownloadGuru potentially unwanted
APEX	Malicious
TrendMicro-HouseCall	TSPY_AGENT_BK080382.TOMC
Avast	Win32:PUP-gen [PUP]
ClamAV	Win.Trojan.653825-1
Kaspersky	not-a-virus:AdWare.Win32.ForceStartPage.a
BitDefender	Gen:Variant.Adware.Graftor.46075
NANO-Antivirus	Trojan.Win32.Downware2.bbxdmy
SUPERAntiSpyware	Trojan.Agent/Gen-StartPage
Rising	Trojan.Win32.Generic.12DBAAC2 (C64:YzY0OmYV434yv3/z)
Emsisoft	Gen:Variant.Adware.Graftor.46075 (B)
F-Secure	Trojan.TR/StartPage.879411
Baidu	Win32.Adware.Generic.v
VIPRE	Gen:Variant.Adware.Graftor.46075
TrendMicro	TSPY_AGENT_BK080382.TOMC
Trapmine	malicious.moderate.ml.score
Sophos	Download-Guru (PUA)
Ikarus	not-a-virus:AdWare.Win32.ForceStartPage
Jiangmin	Adware.Agent.aizm
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/StartPage.879411
Varist	W32/ForceStart.SRDH-1174
Antiy-AVL	GrayWare[AdWare]/Win32.ForceStartPage
Kingsoft	malware.kb.b.865
Microsoft	Adware:Win32/Multiverze
Xcitium	TrojWare.Win32.Agent.RKD@4pmhfc
Arcabit	Trojan.Adware.Graftor.DB3FB
ViRobot	Adware.Forcestartpage.364032.CRU
ZoneAlarm	not-a-virus:AdWare.Win32.ForceStartPage.a
GData	Gen:Variant.Adware.Graftor.46075
Cynet	Malicious (score: 100)
AhnLab-V3	Adware/Win32.Strictor.R28839
VBA32	BScope.Adware.ForceStartPage
Cylance	unsafe
Panda	Trj/Genetic.gen
Tencent	Adware.Win32.ForceStartpage.a
Yandex	Trojan.GenAsa!v6IBKgi1Ac8
MAX	malware (ai score=99)
MaxSecure	Trojan.Malware.8325621.susgen
Fortinet	Riskware/DownloadGuru
AVG	Win32:PUP-gen [PUP]
DeepInstinct	MALICIOUS
alibabacloud	AdWare:Win/ForceStartPage.a