Malware

Graftor.156185 removal

Malware Removal

The Graftor.156185 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.156185 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Graftor.156185?


File Info:

crc32: 219AC351
md5: 9652cda0e62ada1949ff47fb35d27576
name: OMD212-LNG.exe
sha1: 8ef168646096571ff97041e549dc86c668274e67
sha256: dd36cf04cba4e339cdd7e7e5e6c0aff3141fbdab1a1cfea6458492aac947df59
sha512: 2276efa9739a88058d1923464cc1e39521c66581e811aabfbbf7ef0d9b8e2cb17b0bffc4a2db79217be9aad542b7c7b50983aa78a344e389602d3c629c36e2e4
ssdeep: 49152:hR1x8yVI1HMq4xMCs/+l3GzedPiBgHq6XvYD7TulrZ/N:H1x8j1HMqJCk+l3Gq4BgH/Xvo7TurZ1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: LinGon
InternalName: OMD2+12-LNG_v1.29911Sep2012
FileVersion: 1.02.0002
CompanyName: LinGon
Comments: Trainer Made By LinGon 2012 - UnMatched Quality Since 2008.
ProductName: Orc's Must Die 2 - 2 Aug 2012 - Updated 11 Sep 2012 - Trainer by LinGon
ProductVersion: 1.02.0002
FileDescription: A LinGon Trainer
OriginalFilename: OMD2+12-LNG_v1.29911Sep2012.exe

Graftor.156185 also known as:

BkavHW32.Packed.
MicroWorld-eScanGen:Variant.Graftor.156185
CAT-QuickHealTrojan.IGENERIC
McAfeeGeneric-FAAF!9652CDA0E62A
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
SangforMalware
K7AntiVirusTrojan ( 00006f8a1 )
BitDefenderGen:Variant.Graftor.156185
Cybereasonmalicious.0e62ad
Invinceaheuristic
F-ProtW32/VMProtBad.D.gen!Eldorado
SymantecPacked.Vmpbad!gen4
APEXMalicious
GDataGen:Variant.Graftor.156185
AlibabaPacked:Win32/VMProtect.8c8e2323
NANO-AntivirusTrojan.Win32.Black.yausa
AegisLabTrojan.Win32.Generic.4!c
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Graftor.156185 (B)
ComodoMalware@#3ew3pwgixqe5l
F-SecureTrojan.TR/Black.Gen2
DrWebTrojan.Siggen6.59577
ZillyaTrojan.Packed.Win32.22951
TrendMicroTROJ_FRS.0NA103BJ19
McAfee-GW-EditionBehavesLike.Win32.PWSSpyeye.vc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.9652cda0e62ada19
SophosMal/VMProtBad-A
IkarusGen.Malware.Heur
CyrenW32/VMProtBad.D.gen!Eldorado
JiangminTrojan/Generic.aqlhg
MaxSecureTrojan.Malware.3200550.susgen
AviraTR/Black.Gen2
WebrootW32.Malware.Gen
ArcabitTrojan.Graftor.D26219
MicrosoftTrojan:Win32/Wacatac.C!ml
AhnLab-V3Trojan/Win32.Dynamer.R180983
Acronissuspicious
ALYacGen:Variant.Graftor.156185
Ad-AwareGen:Variant.Graftor.156185
MalwarebytesCrackTool.Agent
ESET-NOD32a variant of Win32/Packed.VMProtect.AAH
TrendMicro-HouseCallTROJ_FRS.0NA103BJ19
RisingTrojan.Win32.Generic.13510B06 (C64:YzY0OrEUUGQFbzYt)
YandexTrojan.VMProtect!
SentinelOneDFI – Suspicious PE
eGambitGeneric.Malware
AVGFileRepMalware [PUP]
AvastWin32:Trainer-F [PUP]

How to remove Graftor.156185?

Graftor.156185 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment