Application.Graftor.460754 (B) information

The Application.Graftor.460754 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Graftor.460754 (B) virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Sniffs keystrokes
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

dlsw.br.baidu.com

a.tomx.xyz

How to determine Application.Graftor.460754 (B)?


File Info:
crc32: C1DD85D1
md5: 4accb84cba495a5aade3696bd8ecad21
name: zsgws7esexxgq.exe
sha1: 41680513a62f9952a89fb60edc5df18d0faa83ed
sha256: e1b09d009e69ca71fbc67d013b6962ae98d650e641cdcd301d83e43d5649dd8b
sha512: 1665397473104535349e492b9fd41b14d81379b00ef8c829e8c94356c2910576714cd62f78181fc57d290fe3c48f780544952e1546c8037a6e1db7783b911099
ssdeep: 24576:GJFJObNngS+Dq94jgAKUqv6Y60BGp2dTPHHTlKd73k1R5bRB15:yFJRS+DQ8gAHq60XhHHTlK13k1L
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: ShinSangokumusou7
FileVersion: 1.0.0.0
CompanyName: ShinSangokumusou7
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: ShinSangokumusou7
ProductVersion: 1.0.0.0
FileDescription: ShinSangokumusou7
Translation: 0x0804 0x04b0

Application.Graftor.460754 (B) also known as:

Bkav	W32.AIDetectVM.malware
MicroWorld-eScan	Gen:Variant.Application.Graftor.460754
McAfee	Artemis!4ACCB84CBA49
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
SUPERAntiSpyware	Trojan.Agent/Gen-OnlineGames
Sangfor	Malware
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Gen:Variant.Application.Graftor.460754
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.cba495
Invincea	heuristic
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
GData	Win32.Application.PUPStudio.A
Kaspersky	Trojan-Dropper.Win32.Dorifel.baca
Alibaba	TrojanDropper:Win32/Dorifel.d493d006
NANO-Antivirus	Trojan.Win32.Dwn.eayrvb
Avast	Win32:Malware-gen
Tencent	Win32.Trojan-dropper.Dorifel.Pgdo
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Application.Graftor.460754 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
DrWeb	Trojan.DownLoader18.55432
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
MaxSecure	Trojan.Malware.1728101.susgen
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.4accb84cba495a5a
Sophos	Generic PUA EB (PUA)
F-Prot	W32/Agent.EW.gen!Eldorado
Jiangmin	TrojanDownloader.Generic.annf
Webroot	W32.Dropper.Gen
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Arcabit	Trojan.Application.Graftor.D707D2
ZoneAlarm	Trojan-Dropper.Win32.Dorifel.baca
Microsoft	Trojan:Win32/Tiggre!rfn
AhnLab-V3	Malware/Win32.Generic.C2419535
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34090.Hr0@aOSE9pgb
MAX	malware (ai score=100)
VBA32	Trojan.Downloader
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Rising	Dropper.Dorifel!8.31E (CLOUD)
Yandex	Trojan.DownLoader!
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/QQWare.A!tr
Ad-Aware	Gen:Variant.Application.Graftor.460754
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Application.Graftor.460754 (B)?

Application.Graftor.460754 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Application.Graftor.460754 (B) information