Categories: Malware

Graftor.116809 removal tips

The Graftor.116809 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.116809 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
A process attempted to delay the analysis task.
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Attempts to modify proxy settings

How to determine Graftor.116809?


File Info:
name: 37648553F4EE6C5CB712.mlwpath: /opt/CAPEv2/storage/binaries/3c72d509f5ba2f6bde93c583835e3fa87875b90cdb3b864e01d215b1caec100ecrc32: 86B81709md5: 37648553f4ee6c5cb712cca446340a9asha1: 3b704418aeeea80b94da3f008d57303242b350besha256: 3c72d509f5ba2f6bde93c583835e3fa87875b90cdb3b864e01d215b1caec100esha512: 95cea52e63ef2ea2a3822ae9d64f4477835c8d2f29a6ff2056ae3905dc9ae956a84b36c066d04f8c9956f5d2afa924b5baabae444a25d7484dc7e0afe5cfee85ssdeep: 384:Xt4NXw3X0b/E8Q+gWNLOWwX4kk94Rgfm7jY/9u1T:db3X6/bg4CWwX4kkyam/Y1otype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EB923A50DE55A983CA53C3F0F4AE26BAC4B718B85E5F42867380CB9314756E352E9E0Fsha3_384: 11fefa2022c65e057f1743e97243941341d9c5768a0b823b598971bad89516672a2660ccd33bd06e75bf334824c85318ep_bytes: 558bec6aff68e0604000682051400064timestamp: 2012-11-20 00:10:14
Version Info:
0: [No Data]

Graftor.116809 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.Agent.2!c
MicroWorld-eScan	Gen:Variant.Graftor.116809
FireEye	Generic.mg.37648553f4ee6c5c
ALYac	Gen:Variant.Graftor.116809
Cylance	Unsafe
VIPRE	Gen:Variant.Graftor.116809
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Trojan ( 0055e4041 )
Alibaba	Trojan:Win32/Ixeshe.68eadc38
K7GW	Trojan ( 0055e4041 )
Cybereason	malicious.3f4ee6
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.TGM
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Ixeshe.aa
BitDefender	Gen:Variant.Graftor.116809
NANO-Antivirus	Trojan.Win32.Agent.bdlshi
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Generic.uzk
Ad-Aware	Gen:Variant.Graftor.116809
Emsisoft	Gen:Variant.Graftor.116809 (B)
Comodo	Malware@#18gi35x79lfic
DrWeb	Trojan.DownLoader8.27995
McAfee-GW-Edition	BackDoor-EKF!37648553F4EE
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.116809
Avira	HEUR/AGEN.1246230
Antiy-AVL	Trojan/Generic.ASMalwS.325E
Arcabit	Trojan.Graftor.D1C849
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
Acronis	suspicious
McAfee	BackDoor-EKF!37648553F4EE
MAX	malware (ai score=99)
VBA32	BScope.Adware.Agent
Malwarebytes	MachineLearning/Anomalous.97%
Rising	Trojan.Generic@AI.98 (RDML:21ACifm87u7F30o2cVVJ5g)
Yandex	Trojan.Rogue!AJvSfmS6SEE
Ikarus	Trojan.Win32.Swisyn
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZexaF.34786.bqW@aC7RfEc
AVG	Win32:Malware-gen
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_100% (W)