Categories: Malware

Graftor.18460 removal guide

The Graftor.18460 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.18460 virus can do?

Behavioural detection: Executable code extraction – unpacking
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Graftor.18460?


File Info:
name: DD849DC17C2778E8AE79.mlwpath: /opt/CAPEv2/storage/binaries/b7dcebec87e08e0435fdf1bafca00fcd903eb25e5bb071cb3605872bdd66ca31crc32: 3AD14ED2md5: dd849dc17c2778e8ae79a47941de15c0sha1: bb5a8a7cef6f3fc651ddf6bca7217bdffb7dac3asha256: b7dcebec87e08e0435fdf1bafca00fcd903eb25e5bb071cb3605872bdd66ca31sha512: 74abd71e90b36176b84287b788b42f930bb9ebd310f491d1a53bf53f9e7cb75b619e941c9cc09a79bf3e047226f848096b587f9a59039c070fd27bac7de38d4essdeep: 1536:wrVOXgpwe51IEQIcuJpaeDlICdclUOBrPO0Hjrmfzm:cws51vzJjlICdZC5DBtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B7A36D3BF9588008F2E545B81876A6A739297D705544DC26FBA2FF4D2CB1B82B8F1707sha3_384: 3ae46447be69bc9b2ee5c777d49e631f930870f11589895f8cc4574c4fcc7b95332bf5195c06af8b9120c320b1370c54ep_bytes: 6854c34000e8f0ffffff000000000000timestamp: 2010-11-16 11:32:55
Version Info:
Translation: 0x0409 0x04b0ProductName: Project1FileVersion: 1.00ProductVersion: 1.00InternalName: puxador_amigoOriginalFilename: puxador_amigo.exe

Graftor.18460 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Graftor.18460
ClamAV	Win.Dropper.Remcos-9800818-0
McAfee	Artemis!DD849DC17C27
Malwarebytes	MachineLearning/Anomalous.96%
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
Alibaba	TrojanSpy:Win32/Bancos.d97fdbe4
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.17c277
Cyren	W32/Bancos.H.gen!Eldorado
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Bancos.NVV
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Downloader.Win32.Agent.ffcb
BitDefender	Gen:Variant.Graftor.18460
NANO-Antivirus	Trojan.Win32.Agent.iknhu
Avast	Win32:Bancos-BMR [Trj]
Tencent	Win32.Trojan-Downloader.Agent.Fplw
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/VB.Downloader.Gen
VIPRE	Gen:Variant.Graftor.18460
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.nh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.dd849dc17c2778e8
Emsisoft	Gen:Variant.Graftor.18460 (B)
Ikarus	Trojan-Downloader.Win32.Bancos
GData	Gen:Variant.Graftor.18460
Webroot	Trojan:Win32/Comisproc
Avira	TR/VB.Downloader.Gen
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Xcitium	Malware@#3o4qywsspeuqw
Arcabit	Trojan.Graftor.D481C
ZoneAlarm	Trojan-Downloader.Win32.Agent.ffcb
Microsoft	Trojan:Win32/Comisproc
Google	Detected
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/Dadobra.ATE
Rising	Trojan.Win32.Generic.12763DC5 (C64:YzY0OuYkRq6OwETR)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VB.FDM!tr.dldr
BitDefenderTheta	AI:Packer.838DCD3F1F
AVG	Win32:Bancos-BMR [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)