Graftor.381446 removal

The Graftor.381446 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.381446 virus can do?

Authenticode signature is invalid
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

wpad.local-net

How to determine Graftor.381446?


File Info:
name: E886CE2C90D16273862A.mlw
path: /opt/CAPEv2/storage/binaries/d700fe1d4af8d009598ba1bd3730cc288d1c9389ee1e94a0d8dbc163cc27ce07
crc32: 5B19F6ED
md5: e886ce2c90d16273862ad2ebd553cd5a
sha1: 6aad44ef252e8420527cb61b43903e4242a3210d
sha256: d700fe1d4af8d009598ba1bd3730cc288d1c9389ee1e94a0d8dbc163cc27ce07
sha512: d227224a172a79cd7da5519492a3aa9b0ad640744465de420fbf3ac72942e1f868b956bd56d10a0fa90521d4345a39e525577c7bd901d36b9b95e3f3c7e0d917
ssdeep: 192:YJYp/y8PVRTRUlyeX84muf85kmMj+fcbR/QBiaWrP88LHWfx2dw:YJwUfX6Ne+009WrP88LHWfxK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10492A603A7E8A03EF0F32EB029B656521B257C31AD31E35FA7549A6E1971B40D434F22
sha3_384: 9e1994908a088f4bc34f145bbd21704efdee519b4f1f0aa941aacefafe7b2f5bae28bfbea1e29a4033f7f881211b56ab
ep_bytes: 558bec6aff6868120001686625000164
timestamp: 2004-08-04 06:05:46

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft(C) Register Server
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
InternalName: REGSVR32
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: REGSVR32.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.2180
Translation: 0x0409 0x04b0

Graftor.381446 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.381446
FireEye	Gen:Variant.Graftor.381446
McAfee	RDN/Generic.dx
Cylance	Unsafe
Zillya	Trojan.Genome.Win32.257990
Sangfor	Riskware.Win32.Wacapew.C
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Generic.6c319908
Cyren	W32/Patched.AI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Graftor.381446
Avast	FileRepMalware
Rising	Malware.Heuristic!ET#78% (RDMK:cmRtazpNNqMQuh4KWABYgVdmpng9)
Ad-Aware	Gen:Variant.Graftor.381446
Emsisoft	Gen:Variant.Graftor.381446 (B)
Comodo	Malware@#281y1bwdbrgid
TrendMicro	TROJ_GEN.R002C0PIT21
McAfee-GW-Edition	RDN/Generic.dx
Sophos	Generic PUA GK (PUA)
GData	Gen:Variant.Graftor.381446
Avira	TR/Patched.Gen2
Arcabit	Trojan.Graftor.D5D206
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Graftor.381446
Malwarebytes	Malware.Heuristic.1006
TrendMicro-HouseCall	TROJ_GEN.R002C0PIT21
Tencent	Malware.Win32.Gencirc.114b0178
Ikarus	Trojan.Patched
Webroot	W32.Malware.Gen
AVG	FileRepMalware

How to remove Graftor.381446?

Graftor.381446 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X