Categories: Malware

Graftor.344357 removal

The Graftor.344357 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.344357 virus can do?

Injection (inter-process)
Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to restart the guest VM
Detects Sandboxie through the presence of a library
A potential decoy document was displayed to the user
Checks the version of Bios, possibly for anti-virtualization
Attempts to modify proxy settings
Collects information to fingerprint the system

Related domains:

www.quaintspokenracketiest.site

How to determine Graftor.344357?


File Info:
crc32: C2763A43md5: bf8a370332552ff4b9b5c1191a8c88b2name: BF8A370332552FF4B9B5C1191A8C88B2.mlwsha1: 18e51223aa2018dfc241ed06bef27df4f25615f1sha256: dddbcb5378c7f99ba7687245528de5576342390200aaf74c67277ab079344c90sha512: 37dd9c5205164534820777fcbfb7e1d7755b15236fcb241d4cf852df0ce9adf4af62076c85e68ec611664b63c552824fca25b66f83e0c90095df32b9eb81e460ssdeep: 24576:KuvkTslfQQ1LY2cgkxi682Spcbq3PSEPWFn2qjMcloaNYLXN5oFj3OkQT:bvLfBYrs6zbq3PZWxzMYTNKXN6Fj35type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
0: [No Data]

Graftor.344357 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.344357
FireEye	Generic.mg.bf8a370332552ff4
ALYac	Gen:Variant.Graftor.344357
Cylance	Unsafe
Zillya	Downloader.Adload.Win32.43541
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Graftor.344357
K7GW	Trojan ( 00504c181 )
K7AntiVirus	Trojan ( 00507f2b1 )
Baidu	Win32.Trojan.Kryptik.azz
Cyren	W32/S-064d2515!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Dropper-gen [Drp]
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Generic
NANO-Antivirus	Trojan.Win32.AdLoad.ellntj
Rising	Trojan.Kryptik!1.A6EC (CLASSIC)
Ad-Aware	Gen:Variant.Graftor.344357
Sophos	Amonetize (PUA)
F-Secure	Heuristic.HEUR/AGEN.1117579
DrWeb	Trojan.Amonetize.14387
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Gen:Variant.Graftor.344357 (B)
SentinelOne	Static AI – Malicious PE – Adware
Jiangmin	Downloader.AdLoad.mdq
Webroot	Pua.Amonetize
Avira	HEUR/AGEN.1117579
MAX	malware (ai score=88)
Antiy-AVL	RiskWare[Downloader]/Win32.AdLoad
Microsoft	PUA:Win32/Amonetize
Arcabit	Trojan.Graftor.D54125
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Generic
GData	Gen:Variant.Graftor.344357
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.AdLoad.R194633
Acronis	suspicious
McAfee	Artemis!BF8A37033255
Malwarebytes	PUP.Optional.IStartSurf
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.FOCW
Tencent	Malware.Win32.Gencirc.10bc08b3
Yandex	Trojan.GenAsa!t0EmAP/7alA
Ikarus	PUA.Amonetize
eGambit	Unsafe.AI_Score_98%
Fortinet	W32/Kryptik.FOCW!tr
BitDefenderTheta	Gen:NN.ZexaF.34804.THW@aCVs2xbi
AVG	Win32:Dropper-gen [Drp]
Paloalto	generic.ml
Qihoo-360	Win32/Virus.Downloader.49b