About “Graftor.120904” infection

The Graftor.120904 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.120904 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Graftor.120904?


File Info:
name: 905D1003C1712A887B66.mlw
path: /opt/CAPEv2/storage/binaries/3972078e0c18465750c15d155ca41db920abbebf8dbeb19859cd79901266c0ca
crc32: 95286590
md5: 905d1003c1712a887b66c20d0062f399
sha1: 0d5fa37999341525f234e8f45667127b072310e2
sha256: 3972078e0c18465750c15d155ca41db920abbebf8dbeb19859cd79901266c0ca
sha512: c77f5f83d60ab6643d061481958f5c4bd7c00474a7784a1b908b6ac007e4b28067a4ea4c20be7c2b5ab0b408a337ff4f314519f66d3663226276e83cedd4b832
ssdeep: 768:15J3kChYikqqJ9woC7jqhSbLZPkIgB0WkTtwEDE6nKEZ3rBN0YG:15JVl49w/qk9PHmkt+YG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6336B26B694C032D86615304875C6A25A7FBC225BB4C5DB7F980B7E6FE03D04E3937A
sha3_384: 5a6a58baf2891275b4922672e9b014131d64b855bfc298a21c13cbee7649214c563b86c8d1988615899581512d213356
ep_bytes: e8a0220000e989feffff8bff558bec83
timestamp: 2016-09-30 16:13:17

Version Info:
0: [No Data]

Graftor.120904 also known as:

Lionic	Trojan.Win32.Graftor.4!c
MicroWorld-eScan	Gen:Variant.Graftor.120904
FireEye	Generic.mg.905d1003c1712a88
McAfee	Artemis!905D1003C171
Alibaba	Malware:Win32/km_2c9ec.None
K7GW	Trojan ( 004f49ee1 )
K7AntiVirus	Trojan ( 004f49ee1 )
Symantec	Trojan.Gen.MBT
APEX	Malicious
BitDefender	Gen:Variant.Graftor.120904
Tencent	Malware.Win32.Gencirc.11496754
Ad-Aware	Gen:Variant.Graftor.120904
Emsisoft	Gen:Variant.Graftor.120904 (B)
DrWeb	Trojan.Inject2.35588
McAfee-GW-Edition	Artemis!Virus
Sophos	Mal/Emogen-Y
Ikarus	Trojan.Win32.Refroso
GData	Gen:Variant.Graftor.120904
Jiangmin	Trojan.Invader.aiy
Antiy-AVL	Trojan/Generic.ASMalwS.1BCA70E
ViRobot	Trojan.Win32.Z.Graftor.53888
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
MAX	malware (ai score=84)
Malwarebytes	PUP.Optional.ConvertAd
TrendMicro-HouseCall	TROJ_GEN.R002H09KM21
Rising	Trojan.Generic@ML.100 (RDML:nUVpwCQTRh40EAIiud+aYQ)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/PossibleThreat
Cybereason	malicious.3c1712

How to remove Graftor.120904?

Graftor.120904 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X