About “Graftor.133166” infection

The Graftor.133166 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.133166 virus can do?

Executable code extraction
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Graftor.133166?


File Info:
crc32: 20DD74EF
md5: f26b13a59ad17867015b4bf0953af623
name: F26B13A59AD17867015B4BF0953AF623.mlw
sha1: 593b4c66efc7cbb7d50fd6dd391913a2ca021cfd
sha256: 547d678d6612508457c054808e6639e34409f551034cdb03d31409c5d4f0becb
sha512: 9f872cb0ba1de218f1285cc839f1e15ef480c28d5762dc3896d6ebc3826920c580e3a7f5bfaa775aae3ff97b1a5a0e4d8e4978ac4b307054742248fe967c6989
ssdeep: 6144:kx/h7ggHHHc9WqSBjqTgJmWOhQf2mnATDTU0HDhNQePZ:Eh7ggH3jwgJPWQMTU0Hf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2021
InternalName: nishsouiosahbushidashuiloux
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: nishsouiosahbushidashuiloux Application
ProductVersion: 1, 0, 0, 1
FileDescription: nishsouiosahbushidashuiloux MFC Application
OriginalFilename: nishsouiosahbushidashuiloux.EXE
Translation: 0x0409 0x04b0

Graftor.133166 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Graftor.133166
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Graftor.133166
Cybereason	malicious.59ad17
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.CHH
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Graftor.133166
Ad-Aware	Gen:Variant.Graftor.133166
Comodo	TrojWare.Win32.Agent.PDSB@4q3i1w
BitDefenderTheta	Gen:NN.ZexaE.34790.vq0@aqc8Q7nj
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Graftor.133166
Emsisoft	Gen:Variant.Graftor.133166 (B)
Microsoft	Trojan:Win32/Trickbot!ml
GData	Gen:Variant.Graftor.133166
McAfee	Artemis!F26B13A59AD1
MAX	malware (ai score=82)
Malwarebytes	Malware.AI.4103873004
TrendMicro-HouseCall	TROJ_GEN.R005H09G721
Ikarus	Trojan.Win32.Farfli
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HLGR!tr
Qihoo-360	Trojan.Generic

How to remove Graftor.133166?

Graftor.133166 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X