Categories: Malware

Graftor.16340 malicious file

The Graftor.16340 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.16340 virus can do?

Loads a driver
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Graftor.16340?


File Info:
crc32: 8B1F42A4md5: c1297a00ced06df89647ab1b8495c511name: C1297A00CED06DF89647AB1B8495C511.mlwsha1: cc325513ab6447e4cb9a0f47fdb5a9bfb1c4722esha256: 5fc82dbd9b7e107a7accd1d5b22de51eaf7519e4b59350c02d4545bf007f9e7esha512: c96ed3f18fcbe025d441fd1a771d2819f384bce01f1354d2b615cf7fced712c0405fa11d843f929dddd762f2ff4c75164aee50a2cc35aa60305bf62587a5dca7ssdeep: 24576:bt+eudigKcZRql1t0yq8tTU8yM6jGboZuIzyaku:bkVdTmTs868l+9vmRutype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright by Dianro[Butterfly Fairy]FileVersion: 1.0.0.0CompanyName: DianroComments: Anrox7cfbx5217[qqt321.cn]ProductName: Anro SoftProductVersion: 1.0.0.0FileDescription: QQx58024.3x7ec8x7ed3x8005Translation: 0x0804 0x04b0

Graftor.16340 also known as:

K7AntiVirus	Trojan ( 005246d51 )
Lionic	Trojan.Win32.Genome.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop4.15999
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.16340
Cylance	Unsafe
Zillya	Trojan.Genome.Win32.156429
Sangfor	Suspicious.Win32.Ulise.94931
Alibaba	RiskWare:Win32/ProcPatcher.6660bba6
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.0ced06
Baidu	Win32.Rootkit.Agent.f
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:MiscX-gen [PUP]
ClamAV	Win.Malware.Flystudio-9877903-0
Kaspersky	not-a-virus:UDS:RiskTool.Win32.ProcPatcher.a
BitDefender	Gen:Variant.Graftor.16340
NANO-Antivirus	Trojan.Win32.TrjGen.cuylrq
MicroWorld-eScan	Gen:Variant.Graftor.16340
Ad-Aware	Gen:Variant.Graftor.16340
Sophos	Generic PUA MM (PUA)
Comodo	Worm.Win32.Dropper.RA@1qraug
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXNF-VT!C1297A00CED0
FireEye	Generic.mg.c1297a00ced06df8
Emsisoft	Gen:Variant.Graftor.16340 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Genome.biga
Webroot	W32.Trojan.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.21F11E
Kingsoft	Win32.Troj.Genome.(kcloud)
Microsoft	Trojan:Win32/Dynamer!dtc
GData	Win32.Trojan.PSE.11B5R9D
Acronis	suspicious
McAfee	GenericRXNF-VT!C1297A00CED0
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Tiggre
Malwarebytes	Trojan.MalPack.FlyStudio
Panda	Trj/CI.A
Rising	Rootkit.Agent!1.6784 (CLASSIC)
Yandex	Trojan.Agent!YKTmHu1qv4s
Ikarus	Trojan.Agent3
MaxSecure	Trojan.Malware.2588.susgen
Fortinet	W32/CoinMiner.65CA!tr
AVG	Win32:MiscX-gen [PUP]
Paloalto	generic.ml