Should I remove “Graftor.123609”?

The Graftor.123609 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.123609 virus can do?

Unconventionial language used in binary resources: Korean
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Graftor.123609?


File Info:
name: DC0B9E97CA5248315678.mlw
path: /opt/CAPEv2/storage/binaries/7c62482243086f9755b78b604e894af71976969818ba26210c8525bc5b98aada
crc32: 055A2B45
md5: dc0b9e97ca5248315678732956f56f35
sha1: 2352a12baae4eed473acc99d975e078df456015a
sha256: 7c62482243086f9755b78b604e894af71976969818ba26210c8525bc5b98aada
sha512: 449ca367545e8afcc1d63f3c96a01048b111beb4a8415d4c1906b1b0886a073a58aa155c814cbc98f98a512b892e4dacf6616d7b7c86afd1838b240bc1747ad4
ssdeep: 6144:yqQY+7wnHO1YkkZ+NWkQx20BGlaFwLfWRLKZVE0:yLaHN20BGAFwDWRLK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17C347D213A808031E7563770560AE7B16FA96E350469E64FEBA47D306F706D3DA2F24F
sha3_384: 181e02f4c47a3037d01fefa9eacf037f4f9467a5bc77d51d49bb2aefa255470acff0ec849093856056f9c182124638f5
ep_bytes: e8f0800000e979feffffcccccccccccc
timestamp: 2013-10-15 11:01:41

Version Info:
0: [No Data]

Graftor.123609 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.123609
Skyhigh	BehavesLike.Win32.Backdoor.dh
McAfee	Artemis!DC0B9E97CA52
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.baae4e
Arcabit	Trojan.Graftor.D1E2D9
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.CardSpy_AGen.C
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Urelas-9977995-0
BitDefender	Gen:Variant.Graftor.123609
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Graftor.123609 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Variant.Graftor.123609
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.dc0b9e97ca524831
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Varist	W32/Kryptik.HTA.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=88)
Kingsoft	malware.kb.a.991
Xcitium	TrojWare.Win32.Small.NAF@531prv
Microsoft	Trojan:Win32/Urelas.AA
GData	Win32.Trojan.PSE.102K66A
Google	Detected
AhnLab-V3	Backdoor/Win32.Plite.C209239
BitDefenderTheta	Gen:NN.ZexaF.36792.omW@aOiKhodi
ALYac	Gen:Variant.Graftor.123609
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@AI.100 (RDML:oEgFwhZEl1WqIJrUlQNb5A)
Ikarus	Trojan-Spy.Win32.Cardspy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CardSpy.PRKJ!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Graftor.123609?

Graftor.123609 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X