Malware

How to remove “Graftor.335092”?

Malware Removal

The Graftor.335092 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.335092 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Possible date expiration check, exits too soon after checking local time
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Graftor.335092?


File Info:

name: E319F3FB40957A5FF136.mlw
path: /opt/CAPEv2/storage/binaries/bff115d5fb4fd8a395d158fb18175d1d183c8869d54624c706ee48a1180b2361
crc32: 9C4F6AAA
md5: e319f3fb40957a5ff13695306dd9de25
sha1: 411b265836f990f7d951ed2c2425b5f931c84ad3
sha256: bff115d5fb4fd8a395d158fb18175d1d183c8869d54624c706ee48a1180b2361
sha512: f6f22b2f03b5c2cdc8b4da8435c8786cbc7428f29cf8c665659d0768fe9a9355df4d4d777e43c2d3ea7a71eeb49543013de1f3445ac550ba3fdfff22a97b2dce
ssdeep: 6144:MmK4XzWFeDQ7HL8w/d9esH+eMREkPywJTr0Ibe5:W4XzWFdL8wWTOkKwTS5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18234E1227AC1C439D5370E3908A5D6760BBEFE704E259E9B339C136D4F641C0672AE6B
sha3_384: 09caa38b540a473144954bd1edcac6be5c7ae411d98bb8edca6ea2dbeab07ddf477ac8fd85f146b691aef2c11bd0e7b5
ep_bytes: e8a6030000e987feffffe9a444000055
timestamp: 2016-09-14 12:54:12

Version Info:

0: [No Data]

Graftor.335092 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Graftor.335092
FireEyeGeneric.mg.e319f3fb40957a5f
McAfeeGenericRXAA-AA!E319F3FB4095
CylanceUnsafe
ZillyaTrojan.ServStart.Win32.13638
SangforTrojan.Win32.Skeeyah.mt
K7AntiVirusTrojan ( 0055e40a1 )
AlibabaTrojan:Win32/Diple.b91c4843
K7GWTrojan ( 0055e40a1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.34806.oyW@amM!!Uji
CyrenW32/ServStart.L.gen!Eldorado
SymantecTrojan.Agentemis!gm
ESET-NOD32a variant of Win32/ServStart.NP
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.WateringHole-7504040-0
KasperskyHEUR:Trojan.Win32.Diple.gen
BitDefenderGen:Variant.Graftor.335092
NANO-AntivirusTrojan.Win32.Diple.fbnzrd
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Diple.Aguj
Ad-AwareGen:Variant.Graftor.335092
EmsisoftGen:Variant.Graftor.335092 (B)
ComodoMalware@#2xgg2vgcbfkq8
DrWebTrojan.Siggen7.33917
VIPREGen:Variant.Graftor.335092
TrendMicroBKDR_COBEACON.A
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
Trapminemalicious.high.ml.score
SophosMal/Generic-S
GDataGen:Variant.Graftor.335092
JiangminTrojan.Diple.brdm
AviraTR/Ratres.osrfk
Antiy-AVLTrojan/Generic.ASMalwS.3E79
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Graftor.D51CF4
MicrosoftTrojan:Win32/Skeeyah
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.Generic.C1563134
VBA32Trojan.Diple
ALYacTrojan.Agent.Diple
MAXmalware (ai score=100)
TrendMicro-HouseCallBKDR_COBEACON.A
RisingTrojan.Generic@AI.93 (RDML:kc1AEn3SVrNyF9zJy7bnAg)
YandexTrojan.GenAsa!39nlz4HTzc4
IkarusTrojan.CopyKittens
MaxSecureTrojan.Malware.10264879.susgen
FortinetW32/Generic.AC.3AFDD3!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.b40957
PandaTrj/GdSda.A

How to remove Graftor.335092?

Graftor.335092 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment