Malware

Should I remove “Graftor.495260 (B)”?

Malware Removal

The Graftor.495260 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.495260 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

vm297349.had.su

How to determine Graftor.495260 (B)?


File Info:

crc32: 6A620DC2
md5: 49064b7dc938826527ae1661d210e9a4
name: 49064B7DC938826527AE1661D210E9A4.mlw
sha1: 4eeaf8abc05c5523e2bad1494b3b03ae9346e1ee
sha256: 96545a13168007fa67500223b93f5d38b23f5aa0aa044ed935b42d010c5d9a74
sha512: 0f066c8915eaaf1df1955c204f1957b54c55af6e505147cdb193dcfb614c7cdb4197d5f3baffdfc16c0c21289a93a5c9a2a87204f099e808068d96e6219866ce
ssdeep: 3072:qUIKlLsiDpV0umk4/70w+k2C5rbOS+ZrptNN1C47DDr7BoOTV:RnlLPlGwgcNttNNPnyQV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Graftor.495260 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005340041 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.24384
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGen:Variant.Graftor.495260
CylanceUnsafe
ZillyaTrojan.Generic.Win32.181646
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 005340041 )
Cybereasonmalicious.dc9388
CyrenW32/S-3b893bdb!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GHOB
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packer.Crypter-6539596-1
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Graftor.495260
NANO-AntivirusTrojan.Win32.Coins.fdvfxg
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
MicroWorld-eScanGen:Variant.Graftor.495260
TencentMalware.Win32.Gencirc.114cf66a
Ad-AwareGen:Variant.Graftor.495260
SophosMal/Generic-R + Mal/GandCrab-D
ComodoTrojWare.Win32.Quant.GL@7onsti
BitDefenderThetaGen:NN.ZexaF.34684.myW@aSQhu8l
TrendMicroMal_HPGen-37b
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.49064b7dc9388265
EmsisoftGen:Variant.Graftor.495260 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.GandCrypt.ef
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1103318
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/GandCrab.AP
GDataGen:Variant.Graftor.495260
AhnLab-V3Win-Trojan/Gandcrab02.Exp
Acronissuspicious
McAfeeTrojan-FPSE!49064B7DC938
MAXmalware (ai score=100)
VBA32BScope.Trojan.Chapak
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallMal_HPGen-37b
RisingRansom.GandCrab!8.F355 (C64:YzY0OthiKoFV0kzE)
YandexTrojan.GenAsa!C7STn4TDZBk
IkarusTrojan-Ransom.GandCrab
MaxSecureRansomeware.GandCrypt.Gen
FortinetW32/GenKryptik.CNAR!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Graftor.495260 (B)?

Graftor.495260 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment