Graftor.270905 (file analysis)

The Graftor.270905 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.270905 virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Injection with CreateRemoteThread in a remote process
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Reads data out of its own binary image
• A process created a hidden window
• Executed a process and injected code into it, probably while unpacking
• Detects Sandboxie through the presence of a library
• Code injection with CreateRemoteThread in a remote process
• Sniffs keystrokes
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Checks for the presence of known devices from debuggers and forensic tools
• Creates known SpyNet mutexes and/or registry changes.
• Anomalous binary characteristics

Related domains:

How to determine Graftor.270905?

File Info:
crc32: 46CB6C78
md5: 83893f12ce391e5905048a29e401643a
name: 83893F12CE391E5905048A29E401643A.mlw
sha1: cd6886ae136949b97e136a14249ecdf3111ef31e
sha256: e4f783cb96a0ee50214a22307959e7966370b02880c6c7147dc1a43950c70a11
sha512: 5542c438f79d9bbb67209cdc8336b3407fe475adf153602ce822dc8d4e8aee0b09e8d7fb70f17953158994eea68353bcc6ca73ae0f31e267cbc92c584872f5bc
ssdeep: 6144:C0MeSTGhT0VBXrptgsWOYrWbEmHW8UpqqkLV/LHC9Ax23IMAJQPU:CQhAXptfAEE6vXNLHCc2YdJ8U
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: STUB
FileVersion: 1.00
CompanyName: Microsoft
ProductName: STUB
ProductVersion: 1.00
OriginalFilename: STUB.exe

Graftor.270905 also known as:

How to remove Graftor.270905?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.