Malware

Graftor.183411 removal guide

Malware Removal

The Graftor.183411 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Graftor.183411 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses suspicious command line tools or Windows utilities

How to determine Graftor.183411?



File Info:

name: 0DD92A0561A02AADA6C0.mlw
path: /opt/CAPEv2/storage/binaries/26e85fdb13bc64e635bab8d45e981f1e8bcd5402e65f3fbca4d3bfb47e0cb551
crc32: 069393E0
md5: 0dd92a0561a02aada6c0d64a7d99d470
sha1: 145fc2393d9c66b51245eda9a00b554d630a9c02
sha256: 26e85fdb13bc64e635bab8d45e981f1e8bcd5402e65f3fbca4d3bfb47e0cb551
sha512: 8945c2c273d031ac43279b0e43739fe22d230ac5721aab43948b50a85c972902455ab8feef59cb2b8f2cf444c66c14e399f46384760f338d6456efc3d72d4f6e
ssdeep: 384:qmly4giHHSi+IybQAOWG7euLpt4lrhJQOLLvYdsmgcXr:5IojeuLglrDdLQsu
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10BD22C438BCD4493EB6655B112AD833B9A32AC807D28BD976B55DC702C773F0E72511B
sha3_384: 1c3aae958fcbf1584d76c9ff0affa3cb7ababc02a63c523bcbc2d29501cc4b995133b57c17d10d64abee2ddea287dc9b
ep_bytes: 558bec6aff687031400068d026400064
timestamp: 2011-10-17 06:41:48


Version Info:

Comments: 
CompanyName: DMS
FileDescription: winback
FileVersion: 3, 0, 0, 5
InternalName: winback
LegalCopyright: Copyright @  DMS 2010
LegalTrademarks: 
OriginalFilename: winback.exe
PrivateBuild: 
ProductName: DMS
ProductVersion: 3, 0, 0, 0
SpecialBuild: 
Translation: 0x0804 0x04b0

Graftor.183411 also known as:

LionicTrojan.Win32.Graftor.4!c
MicroWorld-eScanGen:Variant.Graftor.183411
FireEyeGen:Variant.Graftor.183411
McAfeeArtemis!0DD92A0561A0
K7AntiVirusTrojan ( 004ba1271 )
K7GWTrojan ( 004ba1271 )
Cybereasonmalicious.561a02
BitDefenderGen:Variant.Graftor.183411
NANO-AntivirusTrojan.Win32.Redosdru.eayudh
AvastFileRepMalware [Misc]
Ad-AwareGen:Variant.Graftor.183411
F-SecureTrojan.TR/Redosdru.31608
ZillyaTrojan.GenericCRTD.Win32.5153
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Variant.Graftor.183411 (B)
GDataGen:Variant.Graftor.183411
WebrootW32.Malware.Gen
AviraTR/Redosdru.31608
MAXmalware (ai score=88)
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacGen:Variant.Graftor.183411
IkarusBackdoor.Win32.Dedipros
YandexTrojan.Redosdru!/pzCm7VrYI8
FortinetW32/PossibleThreat
AVGFileRepMalware [Misc]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Graftor.183411?

Graftor.183411 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment