Categories: Malware

Graftor.3194 malicious file

The Graftor.3194 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.3194 virus can do?

Executable code extraction
Creates RWX memory
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Graftor.3194?


File Info:
crc32: EB0AE27Fmd5: fcbda965e4bb669ef5a7f4e33a5d0f68name: FCBDA965E4BB669EF5A7F4E33A5D0F68.mlwsha1: 123acab84ba6a9aefc75f3d3f1cf129fca3bbdf6sha256: 38b1b7802b0fe3b47002dc3d6cf5e3c360433bee072e4653cac2bfa61906f293sha512: 5dc0ce5a1c140c9c0658e1f894efeb0e4602c1bd6b17815498d1a76946b2307a701c43382ae93137c5b568bf4efd20f22ed2d711616898077ff46935ee753ffcssdeep: 1536:/wZZnAEjEIZvumULmj4wrraK5dZ4Ltta9Km/ec3DtAL6bmZ4bXSjrAE+fySPoqR:InnAQVG/LytaKItS/fiLKS+f5Aq7itype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2007 Avira GmbH. All rights reserved.InternalName: AntiVir/Win32FileVersion: 7.6.0.59CompanyName: Avira GmbHPrivateBuild: LegalTrademarks: AntiVirxae is a registered trademark of Avira GmbH, GermanyComments: ProductName: SpecialBuild: ProductVersion: 7.6.0.59FileDescription: AntiVir Command Line Scanner for WindowsOriginalFilename: Translation: 0x0000 0x04b0

Graftor.3194 also known as:

Bkav	W32.FamVT.ZardedT.Trojan
K7AntiVirus	Trojan ( 005298a21 )
Lionic	Trojan.Win32.Generic.lDC0
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Tazebama.235
Cynet	Malicious (score: 100)
CAT-QuickHeal	W32.Virut.G
ALYac	Gen:Variant.Graftor.3194
Cylance	Unsafe
Zillya	Worm.AutoRun.Win32.104378
Sangfor	Trojan.Win32.Save.a
Alibaba	Worm:Win32/Ramnit.b972f251
K7GW	Trojan ( 0045434d1 )
Cybereason	malicious.5e4bb6
Baidu	Win32.Worm.Autorun.f
Cyren	W32/Ramnit.K.gen!Eldorado
Symantec	Packed.Protexor!gen1
ESET-NOD32	Win32/Ramnit.A
Zoner	Trojan.Win32.Ramnit.31771
APEX	Malicious
Avast	Win32:Vitro [Inf]
ClamAV	Win.Trojan.Ramnit-7847
Kaspersky	Worm.Win32.Autorun.icp
BitDefender	Gen:Variant.Graftor.3194
NANO-Antivirus	Trojan.Win32.DownLoad2.wtigj
MicroWorld-eScan	Gen:Variant.Graftor.3194
Tencent	Worm.Win32.AutoRun.aaa
Ad-Aware	Gen:Variant.Graftor.3194
Sophos	Mal/Generic-R + Troj/Ramnit-AP
Comodo	TrojWare.Win32.Kryptik.KLV@4neax2
BitDefenderTheta	Gen:NN.ZexaF.34688.tu3@aKZuY4mi
VIPRE	Packed.Win32.PWSZbot.gen.cy (v)
TrendMicro	TSPY_ZBOT.SMHA
McAfee-GW-Edition	PWS-Zbot.gen.aud
FireEye	Generic.mg.fcbda965e4bb669e
Emsisoft	Gen:Variant.Graftor.3194 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.dkmt
Avira	TR/Drop.Liks.A
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Ramnit
Gridinsoft	Trojan.Win32.Gen.se!i
Arcabit	Trojan.Graftor.DC7A
SUPERAntiSpyware	Trojan.Agent/Gen-FakeAlert[Rn]
ZoneAlarm	Worm.Win32.Autorun.icp
GData	Gen:Variant.Graftor.3194
AhnLab-V3	Trojan/Win32.Zbot.R19508
Acronis	suspicious
McAfee	PWS-Zbot.gen.aud
MAX	malware (ai score=81)
VBA32	Worm.Autorun
Malwarebytes	Nimnul.Virus.FileInfector.DDS
Panda	Generic Malware
TrendMicro-HouseCall	TSPY_ZBOT.SMHA
Rising	Malware.XPACK!1.64E1 (CLOUD)
Yandex	Trojan.GenAsa!cSews1jOxBU
Ikarus	Virus.Win32.Virtob
MaxSecure	Worm.Autorun.icp
Fortinet	W32/Kryptik.KLV!tr
AVG	Win32:Vitro [Inf]
Paloalto	generic.ml