How to remove “Graftor.50154”?

The Graftor.50154 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.50154 virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Spanish (El Salvador)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)

How to determine Graftor.50154?

File Info:
name: 1A0D7268AA08CA9CE6ED.mlw
path: /opt/CAPEv2/storage/binaries/23bc182c618a4f26a39db07185fc14acc5cb86fa70b19c58d2672620ae58dd87
crc32: 4AE0F2C8
md5: 1a0d7268aa08ca9ce6ed64cb158231db
sha1: 8f27a53f749a39ec3d80ea9e66a3423023561bab
sha256: 23bc182c618a4f26a39db07185fc14acc5cb86fa70b19c58d2672620ae58dd87
sha512: f1032943c9a0d2f73a077fda7da8a47e09f4f6778324a8a123bf69f95f7c3251d39441f5c5a6f2d8b54d93f4a83595f4d80eb218459274bd718e935a87b5e6a8
ssdeep: 3072:L8KtaQ2F2svb97AD0pG7xqJo+TVm3uv7QRhH+x5LtpuKSY5:LHtaQpsDeVxymuv7JLtpRS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T165D3E115BC9AC032F00488F0B9796637FA7EEA215643922F8399D454CFF9150FA0A3A7
sha3_384: 5462a4aa5cbe1fd9a32e838e9aafc4c130af11ab64f3840ab94e944e252addd4e729545463d59c68f9ce8edc811363b4
ep_bytes: eb1066623a432b2b484f4f4b90e998b0
timestamp: 2012-11-06 13:30:49

Version Info:
CompanyName: BotCorred, Inc.
FileDescription: µCorred
FileVersion: 1.2.1.23468
InternalName: uCorred.exe
OriginalFilename: uCorred.exe
LegalCopyright: ©2011 BotCorred, Inc. All Rights Reserved.
ProductName: µCorred
ProductVersion: 1.2.1.23468
Translation: 0x0409 0x04e4

Graftor.50154 also known as:

How to remove Graftor.50154?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.