Graftor.166405 removal

The Graftor.166405 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.166405 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Enumerates running processes
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Arabic (Algeria)
• Unconventionial language used in binary resources: Lithuanian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)

How to determine Graftor.166405?

File Info:
name: D3FA27435523D7CD26E0.mlw
path: /opt/CAPEv2/storage/binaries/fe9137ba160a949593162306d182039c6d6d24941487fc991906e41512d9814b
crc32: B949139C
md5: d3fa27435523d7cd26e0619dd5a4fc07
sha1: 8b24712f0465703e73a02e1af8137d6ce2bea3a9
sha256: fe9137ba160a949593162306d182039c6d6d24941487fc991906e41512d9814b
sha512: d7f10b50ca0872aa4af31caa81efc23dbe499d00d953fbda73ff37068cc6ecf90fdb281187996c4450e59d9cfe6bd1578770ee9f4fa3a724d298c1bb34153f41
ssdeep: 3072:z7sii0xZV/XPxJcmY+biFUY8nBZLTvUNQJ:zoiiqfp9eUYQLTvWy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AFD38C137861B633C0550C31CCA087718F6EBC1E0578605B7F8D3A5FAD7D9968A2AB6E
sha3_384: 8121d12b9d87b76874c31ad46203f53a49684935b293c468aff40ffdf198321d2cb955b1cfcc2e250075e7d0b73b66d6
ep_bytes: e8062c0000e978feffff8bff558bec56
timestamp: 2014-12-08 18:19:32

Version Info:
CompanyName: Tv purple - www.Accident.com
FileDescription: Burst consonant hollow porch tape
FileVersion: 6.0.0.2
Internal Name: Accept.exe
Legal Trademarks: Accident
Original Filename: Accept.exe
ProductName: Accident
ProductVersion: 2.0
LegalCopyright: Copyright (C) Accident 2006-2013
Translation: 0x0401 0x04b0

Graftor.166405 also known as:

How to remove Graftor.166405?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.