About “Adware.Graftor.95397” infection

The Adware.Graftor.95397 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Graftor.95397 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Authenticode signature is invalid

How to determine Adware.Graftor.95397?


File Info:
name: 1FDC6B7E855395E5A611.mlw
path: /opt/CAPEv2/storage/binaries/31326e50b84bb0a19e827100f0d81e24457894bdc8afae944666a0de66281d01
crc32: 12E78A03
md5: 1fdc6b7e855395e5a611ea2e842fa24e
sha1: da0b91ed7f324b4a87dd6fb95054ea01e5337fb3
sha256: 31326e50b84bb0a19e827100f0d81e24457894bdc8afae944666a0de66281d01
sha512: 6838a51df9b103d0e36e251ecc09f7c4212519efbfc7475c6af2f8a652d0bdf8fd69008998b85ea2e97e8d91cc9d8b8fe1e8ea8407fc0c9beee575e051fa7a1e
ssdeep: 768:gZ6A8XDcIV/+oC1qa/hq4Rl9jMSyPzmdEGdwS6lBzyPvY6kFl7RGzSRKGWt2LTDz:gn8XDccWx1vz+zS67X6W5RJQGWt2H
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T121A36B52B4E28477E4AF897084B9A737277CE9B40F11ACC3A3946A564DF24E0563329F
sha3_384: baa4a6c538fee856f6f5c5e0e6e34db709d9e8f0c5cf5658fb8932f9dc8b91fa2352a28a4cca23eb824ad162279f6650
ep_bytes: 558bec6aff6838004100684057400064
timestamp: 2013-04-16 06:30:09

Version Info:
0: [No Data]

Adware.Graftor.95397 also known as:

Lionic	Riskware.Win32.Kraddare.1!c
MicroWorld-eScan	Gen:Variant.Adware.Graftor.95397
FireEye	Generic.mg.1fdc6b7e855395e5
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 004d9c0c1 )
BitDefender	Gen:Variant.Adware.Graftor.95397
K7GW	Adware ( 004d9c0c1 )
Cybereason	malicious.e85539
Arcabit	Trojan.Adware.Graftor.D174A5
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Kraddare.HB
APEX	Malicious
Paloalto	generic.ml
Alibaba	AdWare:Win32/Kraddare.f89b8f36
NANO-Antivirus	Riskware.Win32.Kraddare.iwsjhq
ViRobot	Adware.Kraddare.98373
Emsisoft	Gen:Variant.Adware.Graftor.95397 (B)
Comodo	ApplicUnwnt@#18t8ax1q0e0w0
F-Secure	Adware.ADWARE/Adware.Gen
DrWeb	Program.Unwanted.24
Zillya	Adware.Kraddare.Win32.3544
McAfee-GW-Edition	BehavesLike.Win32.BadFile.nt
Sophos	Generic PUA NK (PUA)
Jiangmin	TrojanDownloader.Agent.fial
Avira	ADWARE/Adware.Gen
MAX	malware (ai score=60)
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
GData	Gen:Variant.Adware.Graftor.95397
Cynet	Malicious (score: 100)
VBA32	BScope.Downloader.Agent
Malwarebytes	Adware.KorAd
TrendMicro-HouseCall	TROJ_GEN.R002H0CIG21
Tencent	Trojan.Win32.BitCoinMiner.la
Yandex	Adware.Kraddare!7INXw5bxzMI
Ikarus	PUA.Kraddare
Fortinet	Riskware/Kraddare
AVG	Win32:Rootkit-gen [Rtk]
Avast	Win32:Rootkit-gen [Rtk]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Adware.Graftor.95397?

Adware.Graftor.95397 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X