Adware.Graftor.6807 malicious file

The Adware.Graftor.6807 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Graftor.6807 virus can do?

Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs

How to determine Adware.Graftor.6807?


File Info:
crc32: 98CE47E4
md5: c4fad7f88ab4d750632112a794bb9642
name: C4FAD7F88AB4D750632112A794BB9642.mlw
sha1: 725f32a505b7c41f19d5b8a9d7350630e569f818
sha256: 1e505b9ec17060857bd8123e40f7fc93f90f05f4cd6e9c9a4c47731920de4bdf
sha512: d3cd89c5a5d7d680725ee9a7885c7a745b1dad156cc97ed21d1d1897a163d2b4ac74dcc425b9504f0c24e4e5ca49c21fb14616553d479540151d0fae6df1444f
ssdeep: 6144:oBcF/YTFpAFdY7BdJygotqW7SyvWoExfLfnLkPQQbhkZVnvmep4BpqXs:Ak/YRpAI7vJRW3vzEZLfnaQ+kPyc8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2011
InternalName: Installer
FileVersion: 1, 0, 0, 1
ProductName: Installer Module
ProductVersion: 1, 0, 0, 1
FileDescription: Installer Module
OriginalFilename: Installer.exe
Translation: 0x0409 0x04b0

Adware.Graftor.6807 also known as:

K7AntiVirus	Adware ( 004bba931 )
Lionic	Adware.Win32.WhiteSmoke.2!c
DrWeb	Trojan.DownLoader22.26759
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Adware.Graftor.6807
Cylance	Unsafe
Zillya	Adware.WhiteSmoke.Win32.3215
Sangfor	Adware.Win32.Graftor.6807
Alibaba	AdWare:Win32/WhiteSmoke.4245c810
K7GW	Adware ( 004bba931 )
Cybereason	malicious.88ab4d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.WhiteSmoke.A
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:VHO:Downloader.Win32.OpenCandy.gen
BitDefender	Gen:Variant.Adware.Graftor.6807
NANO-Antivirus	Riskware.Win32.WhiteSmoke.ecjesn
ViRobot	Adware.Whitesmoke.578048
MicroWorld-eScan	Gen:Variant.Adware.Graftor.6807
Tencent	Win32.Risk.Adware.Taow
Ad-Aware	Gen:Variant.Adware.Graftor.6807
Sophos	Generic PUA HC (PUA)
Comodo	ApplicUnwnt@#33xake48lzs0m
VIPRE	WhiteSmoke (not malicious)
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
FireEye	Generic.mg.c4fad7f88ab4d750
Emsisoft	Gen:Variant.Adware.Graftor.6807 (B)
SentinelOne	Static AI – Suspicious PE
Avira	ADWARE/Adware.Gen7
eGambit	Generic.Adware
Antiy-AVL	Trojan/Generic.ASMalwS.189EDB3
Kingsoft	Win32.Troj.WhiteSmoke.qw.(kcloud)
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Adware.Graftor.D1A97
GData	Gen:Variant.Adware.Graftor.6807
McAfee	Adware-WhiteSmoke
MAX	malware (ai score=99)
VBA32	BScope.Adware.WhiteSmoke
Malwarebytes	Trojan.Downloader
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.99 (RDMK:hVRFFeCFLYVnNdCuvOzH6w)
Yandex	Trojan.GenAsa!7wVcfISmEEg
Ikarus	not-a-virus:AdWare.Win32.WhiteSmoke
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/WhiteSmoke
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Adware.Graftor.6807?

Adware.Graftor.6807 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X