How to remove “Graftor.31580”?

The Graftor.31580 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.31580 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Graftor.31580?


File Info:
name: E3C73CD7A2C37EBACB61.mlw
path: /opt/CAPEv2/storage/binaries/e151a7188da98d3000db7b42d1a054cddb8ed3a8095343f4ddde3a0920973f73
crc32: ED9A6FD1
md5: e3c73cd7a2c37ebacb611e4d6bdcdd74
sha1: 4dd89ec291500ddb43b788f5e2cf98874fefde4d
sha256: e151a7188da98d3000db7b42d1a054cddb8ed3a8095343f4ddde3a0920973f73
sha512: 6baf212e652796cac9899ebbc0071f1833425ed388ee59fc577842ca19da41adfa68471f79d85b0273ffd58e592c9e22544b90db623f5a5274beeaf9d03bfa45
ssdeep: 3072:M+upBSau5haEJt0JSHV/mR13bJqeLtZ2SHZ:MTpBpu5hHcJOWJFLtlHZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T133A3F197ACE5CC1AED8098B340F88B7736BF729504C76F27DB7085121D266E2EE944C6
sha3_384: c2c3d76e2a0b9b8ca2cfb541cff9299a83492759a935b713bd1b423c589dcf768f6e501ca0ea9272fc4a567dd50398a9
ep_bytes: 558bec6aff685881400068303b400064
timestamp: 2006-02-20 22:48:39

Version Info:
0: [No Data]

Graftor.31580 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Graftor.31580
FireEye	Generic.mg.e3c73cd7a2c37eba
Zillya	Worm.Agent.Win32.58098
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ClamAV	Win.Malware.Hellspawn-9957597-0
Kaspersky	Worm.Win32.Agent.vw
BitDefender	Gen:Variant.Graftor.31580
NANO-Antivirus	Trojan.Win32.HellSpawn.flexbo
Avast	Win32:WormX-gen [Wrm]
Tencent	Malware.Win32.Gencirc.10b77fe3
Emsisoft	Gen:Variant.Graftor.31580 (B)
F-Secure	Worm.WORM/Angelus.nxc
DrWeb	Win32.HLLW.HellSpawn.1
VIPRE	Gen:Variant.Graftor.31580
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Worm.Win32.Agent
GData	Gen:Variant.Graftor.31580
Jiangmin	Trojan.Hesv.cai
Webroot	W32.Malware.Gen
Avira	WORM/Angelus.nxc
MAX	malware (ai score=82)
Antiy-AVL	Worm/Win32.Agent
Arcabit	Trojan.Graftor.D7B5C
ViRobot	Worm.Win32.Agent.53248
ZoneAlarm	Worm.Win32.Agent.vw
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Worm/Win32.RL_Agent.R305704
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36350.gqZ@aqa9Vkp
Malwarebytes	Generic.Malware.AI.DDS
APEX	Malicious
Rising	Trojan.Generic@AI.97 (RDML:xZ5+IpNXWI9OzJMfX5MNpg)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.867483.susgen
AVG	Win32:WormX-gen [Wrm]
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Graftor.31580?

Graftor.31580 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X