Malware

Graftor.406864 removal tips

Malware Removal

The Graftor.406864 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.406864 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Saami
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify proxy settings

Related domains:

ecosystem.unvocal.ru
duckandbear.top

How to determine Graftor.406864?


File Info:

crc32: AE502BE0
md5: 58a2d1a20e3844197ac039ccba45271d
name: 58A2D1A20E3844197AC039CCBA45271D.mlw
sha1: cfa76d67ebb4265f14322a7b5e5075b8314189de
sha256: dce06155843a444a4b6b0f4e3f9b3b1812d42f119d625a6933ffb0c9b12d73a2
sha512: d7cf88237ef6db71cad9185520bcbcd98bed7009dd5fd2b7791dd95de78760fc7bd7a0af007e3407f9d924ec68266490934d0b7af37d4593601af5f9f72a69d4
ssdeep: 3072:nazLwWZr5pf7W/8DYeQu5fGbYC1DnM9IgO2J74KzE6Uhvydsm+mrBErc:rWhfy/8LQOfhC1DnM9M2yD1mrrBL
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: eiGlorea
InternalName: wiGlorea
FileVersion: 89815.40.30.21
CompanyName: niGlorea
ProductName: tiGlorea
ProductVersion: 47210.30.23.13
FileDescription: qiGlorea
OriginalFilename: riGlorea
Translation: 0x0400 0x04b0

Graftor.406864 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Graftor.406864
FireEyeGeneric.mg.58a2d1a20e384419
CAT-QuickHealAdware.Dataric.A5
ALYacGen:Variant.Graftor.406864
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.a!c
SangforMalware
K7AntiVirusTrojan-Downloader ( 005159471 )
BitDefenderGen:Variant.Graftor.406864
K7GWTrojan-Downloader ( 005159471 )
Cybereasonmalicious.20e384
CyrenW32/Trojan.BDJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Downloader.Win32.Generic
NANO-AntivirusTrojan.Win32.Tovkater.eshsxb
TencentMalware.Win32.Gencirc.10b0d3ce
Ad-AwareGen:Variant.Graftor.406864
EmsisoftGen:Variant.Graftor.406864 (B)
ComodoTrojWare.Win32.TrojanDownloader.Tovkater.HT@7ebfmm
F-SecureHeuristic.HEUR/AGEN.1120929
DrWebTrojan.InstallMonster.2347
ZillyaDownloader.Tovkater.Win32.348
TrendMicroHT_TOVKATER_GI080242.UVPM
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
JiangminTrojanDownloader.Generic.awuj
AviraHEUR/AGEN.1120929
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftSoftwareBundler:Win32/InstallMonster
ArcabitTrojan.Graftor.D63550
ZoneAlarmHEUR:Trojan-Downloader.Win32.Generic
GDataGen:Variant.Graftor.406864
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.BundleInstaller.R208386
McAfeeGenericR-KHE!58A2D1A20E38
MAXmalware (ai score=100)
VBA32AdWare.TOVus
MalwarebytesAdware.InstallMonster
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/TrojanDownloader.Tovkater.CO
TrendMicro-HouseCallHT_TOVKATER_GI080242.UVPM
YandexTrojan.GenAsa!51HERDTrEqs
IkarusTrojan-Downloader.Win32.Tovkater
eGambitUnsafe.AI_Score_66%
FortinetW32/Tovkater.CO!tr.dldr
BitDefenderThetaGen:NN.ZexaF.34804.rmMfaaWfiRfG
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.ea1

How to remove Graftor.406864?

Graftor.406864 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment