Malware

Graftor.408845 removal instruction

Malware Removal

The Graftor.408845 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Graftor.408845 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Mimics icon used for popular non-executable file format
  • Anomalous binary characteristics

How to determine Graftor.408845?



File Info:

name: 1D52062983887252F90D.mlw
path: /opt/CAPEv2/storage/binaries/6427fd2261302a3a9c6cafa92bf81ebea45c6d209e0eff3bebe7fc10c856d7a0
crc32: 2E5C4EEF
md5: 1d52062983887252f90d3d0063d49a40
sha1: 0081610b215288613f2998054ce48926bc877028
sha256: 6427fd2261302a3a9c6cafa92bf81ebea45c6d209e0eff3bebe7fc10c856d7a0
sha512: 626df36144d1ea6fcf5b2d1885c6cb7fd35d7c3f365e1d50709cee66a03752378f83ac0c4b4e67f5c032344a01b41976f78d04a67c245e88067267f445db3c3c
ssdeep: 12288:sT+WFwwIn5gVGhtm1i7RjfLBxyVnXa+HrIWug0J1MKJLZmzT1S0b:sTcwIn5gVGhdd/yVnXa+LzVCJLZmzT1l
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T131F40153F5C002B1D4E219365CB99A420B7BED6791F1E99331C872093933D619B3ABAF
sha3_384: e80ca713bb82868c77b0147ab629755936cca34a28c2877d8fe870a0868ea7449893f02dc4e263dda92366c98fe7c50a
ep_bytes: e8ff190000e97ffeffff3b0da0404100
timestamp: 2014-02-09 04:20:07


Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Word
FileVersion: 14.0.6024.1000
InternalName: WinWord
LegalCopyright: © 2010 Microsoft Corporation.  All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: WinWord.exe
ProductName: Microsoft Office 2010
ProductVersion: 14.0.6024.1000
Translation: 0x0000 0x04e4

Graftor.408845 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Facido.b!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Graftor.408845
SkyhighBehavesLike.Win32.Generic.bc
ALYacGen:Variant.Graftor.408845
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDropper.Agent.Win32.565867
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005490181 )
BitDefenderGen:Variant.Graftor.408845
K7GWTrojan ( 005490181 )
Cybereasonmalicious.b21528
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDropper.Agent.RTY
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Facido-9768987-0
KasperskyTrojan-Dropper.Win32.Agent.tfjnyc
RisingDropper.Agent!1.B38C (CLASSIC)
TACHYONTrojan-Dropper/W32.Agent.786181
SophosTroj/Mdrop-JTO
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Fakealert.58572
VIPREGen:Variant.Graftor.408845
TrendMicroTROJ_GEN.R002C0DK723
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.1d52062983887252
EmsisoftGen:Variant.Graftor.408845 (B)
IkarusTrojan-Dropper.Win32.Agent
VaristW32/Agent.HQC.gen!Eldorado
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Dropper]/Win32.Facido
Kingsoftmalware.kb.a.1000
MicrosoftTrojanDropper:Win32/Facido.A!bit
XcitiumTrojWare.Win32.TrojanDropper.Facido.A@7d50kc
ArcabitTrojan.Graftor.D63D0D
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
ZoneAlarmTrojan-Dropper.Win32.Agent.tfjnyc
GDataWin32.Trojan.PSE.1X3M469
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R614846
Acronissuspicious
McAfeeGenericRXNA-IF!1D5206298388
MAXmalware (ai score=80)
DeepInstinctMALICIOUS
VBA32BScope.TrojanDropper.Agent
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DK723
TencentTrojan.Win32.Agent.hct
YandexTrojan.DR.Agent!AFVPFCMQTRA
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.219740810.susgen
FortinetW32/Agent.RTY!tr
BitDefenderThetaGen:NN.ZexaF.36792.V43@aiVupDpi
AVGWin32:DropperX-gen [Drp]
AvastWin32:DropperX-gen [Drp]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Graftor.408845?

Graftor.408845 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment