Categories: Malware

Graftor.296635 malicious file

The Graftor.296635 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.296635 virus can do?

Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

ad.qqfarmer.com.cn

How to determine Graftor.296635?


File Info:
crc32: 2D69A0BCmd5: 7cf923aa80a3acbab04c99fdc8db5de9name: 7CF923AA80A3ACBAB04C99FDC8DB5DE9.mlwsha1: d7a907aeb1c927868ec27a816d6328b1bce3bd31sha256: 7fc9a0d76bca8d1c08314557dcef7f209318583b16c1d963a38a93c476c05557sha512: e0067310ca296276f490ad16ce759c45e3122a87693b72414dc1c26891896d3f76cffb1c8b6541a4105889b1066b66ccadef99c8d1433d319697c29c857ba5bbssdeep: 49152:JkQzZFOAzNafuwjilhmj4+ZfPZ94OD+dEV:JkzAzoWEkhmvZJ94OK2Vtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: www.QQHelper.netInternalName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bFileVersion: 1.4.4.723CompanyName: www.QQHelper.netLegalTrademarks: www.QQHelper.netProductName: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bProductVersion: 1.0.0.0FileDescription: QQx519cx7267x9910x4e09x5408x4e00x52a9x624bOriginalFilename: QQHelper.exeTranslation: 0x0804 0x03a8

Graftor.296635 also known as:

Lionic	Adware.Win32.Delf.2!c
ALYac	Gen:Variant.Graftor.296635
Cylance	Unsafe
Zillya	Adware.Delf.Win32.3338
Sangfor	PUP.Win32.Graftor.296635
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/QQfarmer.101acc9c
Cybereason	malicious.a80a3a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Delf.NAF
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:AdWare.Win32.Delf.way
BitDefender	Gen:Variant.Graftor.296635
NANO-Antivirus	Riskware.Win32.Delf.efpqpk
MicroWorld-eScan	Gen:Variant.Graftor.296635
Tencent	Malware.Win32.Gencirc.10b2fe8c
Ad-Aware	Gen:Variant.Graftor.296635
Sophos	QQHelper (PUA)
BitDefenderTheta	Gen:NN.ZelphiF.34266.1P0baixRINkR
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PGH21
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Gen:Variant.Graftor.296635
Emsisoft	Gen:Variant.Graftor.296635 (B)
Jiangmin	Adware.Delf.ki
Webroot	Pua.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.19D119E
Microsoft	Trojan:Win32/Occamy.C7F
SUPERAntiSpyware	Adware.Delf/Variant
GData	Gen:Variant.Graftor.296635
AhnLab-V3	Unwanted/Win32.HackTool.R119402
McAfee	GenericRXAA-AA!7CF923AA80A3
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Click
Malwarebytes	Adware.QQHelper
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0PGH21
Yandex	Trojan.GenAsa!Uag3Kmyel4s
Ikarus	PUA.QQfarmer
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/Delf
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml