How to remove “Graftor.360894”?

The Graftor.360894 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.360894 virus can do?

Executable code extraction
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Anomalous binary characteristics

How to determine Graftor.360894?


File Info:
crc32: 47E8C911
md5: 5f5fc3a85b20b8b2a62410a7bb81f8f4
name: 5F5FC3A85B20B8B2A62410A7BB81F8F4.mlw
sha1: 9e92bbfd03bfb53af76380c6deef05cd2c708968
sha256: 0fc8fd90f1a3909abf47b64ade10c0a5bfbed107cac76c2c423cefdff75af6d6
sha512: 5692dbfac74e2eec7f197f526c4e82c95fa8a4308551ee492c115db3defb84b4c6689b3ff45ed5030675899524818eaf20e963831b5abb1785b67bcea55a4878
ssdeep: 768:J+12zn45OWuHpkqYPKOUcTSXuU59gongm+DLJYUQvsJTkHouFVom2:Jq2WuJyCO7OXuc+Od+JYUwsNkHooVom
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1998
InternalName: Colors
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: Colors Application
ProductVersion: 1, 0, 0, 1
FileDescription: Colors MFC Application
OriginalFilename: Colors.EXE
Translation: 0x0409 0x04b0

Graftor.360894 also known as:

Elastic	malicious (high confidence)
DrWeb	DLOADER.Trojan
ClamAV	Win.Trojan.Generic-6305873-0
CAT-QuickHeal	Ransom.Locky.YY6
ALYac	Gen:Variant.Graftor.360894
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Cyren	W32/Trojan.IM1.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.GQTR
APEX	Malicious
Avast	Win32:BackdoorX-gen [Trj]
BitDefender	Gen:Variant.Graftor.360894
MicroWorld-eScan	Gen:Variant.Graftor.360894
Tencent	Win32.Trojan.Killav.Syip
Ad-Aware	Gen:Variant.Graftor.360894
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaE.34170.eq0@a4BlHXdi
TrendMicro	BKDR_HPZEGOST.SMF1
McAfee-GW-Edition	GenericRXEG-NT!5F5FC3A85B20
FireEye	Generic.mg.5f5fc3a85b20b8b2
Emsisoft	Gen:Variant.Graftor.360894 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Backdoor:Win32/Farfli.ABM!MTB
Arcabit	Trojan.Graftor.D581BE
GData	Win32.Trojan.Farfli.P
McAfee	GenericRXEG-NT!5F5FC3A85B20
MAX	malware (ai score=87)
VBA32	BScope.Backdoor.Farfli
Malwarebytes	Malware.AI.798336867
TrendMicro-HouseCall	BKDR_HPZEGOST.SMF1
Rising	Trojan.Kryptik!1.AAD1 (CLASSIC)
Ikarus	Worm.Win32.ServStart
Fortinet	W32/GenKryptik.ENVC!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove Graftor.360894?

Graftor.360894 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X