Malware

Graftor.167268 removal tips

Malware Removal

The Graftor.167268 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Graftor.167268 virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Graftor.167268?



File Info:

crc32: 42489748
md5: 55160f9d3d3587a79b980a7a4ec16341
name: 55160F9D3D3587A79B980A7A4EC16341.mlw
sha1: 74ee7c56c396263203955258b07a4838f0b2da1d
sha256: ac1f7c3b638f73c73704bd7f364d5c78a0268927bda563579f03a166ba2d5105
sha512: 59b49e5b8c0dd166bbf5e53a22c89d8794cec0623cfff83a1e9ddff8846e4e735f53afdc52baacc04f14a553a6acdb782396e81e14978f9f18f398b2c7abb8bd
ssdeep: 12288:ccOjkvQkEip1xkXANq/NGGlbRHdXczNQ+FL0llHRSrkVUF8fVke+no:ccxEip14llxS4Vke+o
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 1998-2012  by CJSC "Computing Forces"
InternalName: WebMoney Keeper Classic
FileVersion: 3, 9, 9, 0
CompanyName: CJSC "Computing Forces"
LegalTrademarks: WebMoney Transfer
Comments: WebMoney. Confidence Internet Information Service Technology.
ProductName: WebMoney Keeper Classic
ProductVersion: 3, 9, 9, 0
FileDescription: WebMoney Keeper Classic Runner Module
OriginalFilename: webmoney.exe
Translation: 0x0419 0x04b0

Graftor.167268 also known as:

LionicTrojan.Multi.Generic.4!c
ClamAVWin.Malware.Barys-7726835-0
CAT-QuickHealVirTool.CeeInject.KK6
ALYacGen:Variant.Graftor.167268
CylanceUnsafe
SangforTrojan.Win32.Agent.nil
K7GWTrojan ( 0055e3991 )
K7AntiVirusTrojan ( 0055e3991 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.BQRY
APEXMalicious
AvastWin32:Crypt-RNV [Trj]
CynetMalicious (score: 99)
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Graftor.167268
NANO-AntivirusTrojan.Win32.Zbot.dkikxm
MicroWorld-eScanGen:Variant.Graftor.167268
TencentMalware.Win32.Gencirc.114cd99f
Ad-AwareGen:Variant.Graftor.167268
ComodoMalware@#3b2dxxqfeei17
BitDefenderThetaGen:NN.ZexaE.34170.Py3@aKCPXElf
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_MALKRYP.SM7
McAfee-GW-EditionGeneric-FAVO!55160F9D3D35
FireEyeGeneric.mg.55160f9d3d3587a7
EmsisoftGen:Variant.Graftor.167268 (B)
JiangminTrojanSpy.Zbot.fmrd
AviraTR/Injector.pxuoq
Antiy-AVLTrojan/Generic.ASMalwS.D3AADA
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Graftor.D28D64
GDataGen:Variant.Graftor.167268
McAfeeGeneric-FAVO!55160F9D3D35
MAXmalware (ai score=82)
VBA32TrojanSpy.Zbot
MalwarebytesTinba.Trojan.Stealer.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_MALKRYP.SM7
RisingMalware.Obscure/Heur!1.A89E (CLASSIC)
IkarusTrojan.Win32.Injector
FortinetW32/ZBOT.QU!tr
AVGWin32:Crypt-RNV [Trj]

How to remove Graftor.167268?

Graftor.167268 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment