Malware

Graftor.312649 removal

Malware Removal

The Graftor.312649 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.312649 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

www.adobe.com

How to determine Graftor.312649?


File Info:

crc32: 63CC90FF
md5: dc3d1aca89d4582f9bdabef1e5122499
name: DC3D1ACA89D4582F9BDABEF1E5122499.mlw
sha1: 1e3ed663bc9093ebeae68728d0adf8e220babcc3
sha256: 1e3b21f8f3482277dbfd612c09ad49eaa33cd2e9a6e5abc8aa65e984549c8ccd
sha512: a61b21d8c4ccebf4be9e374fb3e1bc9757c4bcff6dd1cee1d05658016630a66ab5cc6211f8836be2c5c988c6126dbcc3684e4eeee0436ace88571df121050a62
ssdeep: 1536:NiaI7hZvv6PyOTi4Cx84Iqq4RUz1PmN7QgV7Jnqs4R1w0D2f1Qvk:NiJ7HvmVCqca+djVgzR1w0C1Ok
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Graftor.312649 also known as:

K7AntiVirusTrojan ( 004fcd431 )
LionicTrojan.Win32.Yakes.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Inject2.32822
CynetMalicious (score: 100)
ALYacGen:Variant.Graftor.312649
CylanceUnsafe
ZillyaTrojan.Yakes.Win32.70016
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Yakes.affa20f6
K7GWTrojan ( 004fcd431 )
Cybereasonmalicious.a89d45
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.FJMZ
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyTrojan.Win32.Yakes.rnja
BitDefenderGen:Variant.Graftor.312649
NANO-AntivirusTrojan.Win32.Yakes.eigmzw
MicroWorld-eScanGen:Variant.Graftor.312649
TencentMalware.Win32.Gencirc.10c9e16e
Ad-AwareGen:Variant.Graftor.312649
SophosMal/Generic-S
ComodoMalware@#1fjwvo7aq2okc
BitDefenderThetaGen:NN.ZexaF.34266.hqW@aOh9aJai
TrendMicroTROJ_GEN.R002C0PKF21
McAfee-GW-EditionGenericR-JYG!DC3D1ACA89D4
FireEyeGeneric.mg.dc3d1aca89d4582f
EmsisoftGen:Variant.Graftor.312649 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Yakes.smz
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.26CD7CB
MicrosoftTrojan:Win32/Occamy.B
ArcabitTrojan.Graftor.D4C549
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
GDataGen:Variant.Graftor.312649
AhnLab-V3Trojan/Win32.RPack.R190288
Acronissuspicious
McAfeeGenericR-JYG!DC3D1ACA89D4
MAXmalware (ai score=98)
VBA32BScope.Trojan.Yakes
MalwarebytesTrojan.Sharik
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PKF21
RisingTrojan.Generic@ML.96 (RDML:qkPT83FdEx0FGaCA2N0PdA)
IkarusTrojan.Win32.Gandcrab
FortinetW32/Generic.AC.415e43!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Graftor.312649?

Graftor.312649 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment