Categories: Malware

Should I remove “Graftor.27220”?

The Graftor.27220 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.27220 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses suspicious command line tools or Windows utilities

How to determine Graftor.27220?


File Info:
name: CB34EA886D50FC4E6C5B.mlwpath: /opt/CAPEv2/storage/binaries/63a9188deb07238326b5e37c44b4da8ff5f50f14b234acfedf64a3f4134c1279crc32: 224C0AC2md5: cb34ea886d50fc4e6c5b07f6677df3f0sha1: 0babcab9f4c3b3064602d7781c6396caf08d6207sha256: 63a9188deb07238326b5e37c44b4da8ff5f50f14b234acfedf64a3f4134c1279sha512: 5ebf00d396b383bbdd79f231201e692397d2050b9088a1bce0cf66b764748cb06df71b34f32ec1336790bdd6980e9a7fb0bb07da8c09203f79fa44c73ddc54f6ssdeep: 384:5Z0tT0GKFeDyoTjCDZud61Fxbn7amk7PWRI6RwxFwLD0YvphlW:IZDKFeFL8bD7amkT3Aphtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19E131ACBEE618848C1DA02328AAF857F11677D96467146CF3CCCFABBB5F8940D619291sha3_384: 1c69739b29e100dc8bf0df58a7fe1f9e54d6027473262cdb353d81ed8e1a8f4a6319545f5f9c16bed85aa380166a0894ep_bytes: 558bec6aff68c81a400068902a400064timestamp: 2012-01-21 02:17:08
Version Info:
Comments: http://www.metaquotes.netCompanyName: MetaQuotes Software Corp.FileDescription: MetaTraderFileVersion: 4.0.0.409InternalName: MetaTraderLegalCopyright: ? 2001-2011, MetaQuotes Software Corp.LegalTrademarks: MetaTrader?OriginalFilename: PrivateBuild: ProductName: MetaTraderProductVersion: 4.0.0.409SpecialBuild: Translation: 0x0804 0x04b0

Graftor.27220 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Graftor.27220
McAfee	GenericRXCS-WJ!CB34EA886D50
Cylance	Unsafe
VIPRE	Gen:Variant.Graftor.27220
Sangfor	Suspicious.Win32.Save.ins
Alibaba	Trojan:Win32/Farfli.98e7604f
Cybereason	malicious.86d50f
Cyren	W32/Zegost.AA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDropper.Agent.PFE
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Graftor.27220
NANO-Antivirus	Trojan.Win32.Agent.oyewg
Avast	FileRepMalware [Misc]
Tencent	Win32.Trojan.Agen.Pgil
Ad-Aware	Gen:Variant.Graftor.27220
Emsisoft	Gen:Variant.Graftor.27220 (B)
Comodo	Backdoor.Win32.Agent.FLG@4of3sq
Zillya	Trojan.Farfli.Win32.37237
McAfee-GW-Edition	BehavesLike.Win32.Virut.pm
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.cb34ea886d50fc4e
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.27220
Jiangmin	Heur:Backdoor/PcClient
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1225338
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Generic.ASMalwS.3303
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Graftor.D6A54
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Gen
VBA32	BScope.Trojan.SvcHorse.01643
ALYac	Gen:Variant.Graftor.27220
Rising	Trojan.Dynamer!8.3A0 (TFE:5:dNOku2nEaxJ)
Yandex	Trojan.GenAsa!nEnSD/sjv3s
Ikarus	Trojan-Dropper.Win32.Zegost
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Torr.BH!tr.bdr
BitDefenderTheta	Gen:NN.ZexaF.34682.ci0@aWCp0Qhb
AVG	FileRepMalware [Misc]
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_90% (W)