How to remove “Graftor.505430”?

The Graftor.505430 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.505430 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Graftor.505430?


File Info:
crc32: FAC969E8
md5: 6c318f4cfc30cd739e8867e90d0644bd
name: 6C318F4CFC30CD739E8867E90D0644BD.mlw
sha1: 2de286fb44eabc599c2417e6e8f58b6e095fc5cc
sha256: 130669295f013ae8170c9502f3eaee5e7625f553852c85f2b25b87b85b1ad9de
sha512: fe8e1f09f14d89733b546eb4fe6a7aee955cbd8d4c6265364602c405a2a7e6ce40228062e9cd7d3b3b26b8ed4ed04e517be7ad93875c3db661d769185cbb22c8
ssdeep: 6144:qSa2T+pGcsZ6qLfl5iYkaN1yuT0P2VI9R/CdFZJi68pkClF:q92TiG3deYkZP2e2JiXp
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: (C) 2007-2015  ProXoft L.L.C.
FileVersion: 6.8.3.8
CompanyName: ProXoft L.L.C.
LegalTrademarks: (C) 2007-2015  ProXoft L.L.C.
ProductName: MsinameConverting
ProductVersion: 6.8.3.8
FileDescription: Workflowterminated Bo Comfortable
Translation: 0x0409 0x04b0

Graftor.505430 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Trojan.Ransom.Crysis
Cylance	Unsafe
Sangfor	Ransom.Win32.Foreign.oanw
Alibaba	Ransom:Win32/Foreign.b036467a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.cfc30c
Symantec	Ransom.Crysis
ESET-NOD32	Win32/Filecoder.Crysis.P
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Foreign.oanw
BitDefender	Gen:Variant.Graftor.505430
NANO-Antivirus	Trojan.Win32.Ransom.ffvmei
MicroWorld-eScan	Gen:Variant.Graftor.505430
Tencent	Malware.Win32.Gencirc.114d015c
Ad-Aware	Gen:Variant.Graftor.505430
Sophos	Mal/Generic-S
Comodo	Malware@#g1zp035l77kf
BitDefenderTheta	Gen:NN.ZexaF.34050.xmKfa0foqKei
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXJU-EH!0062CC180018
FireEye	Generic.mg.6c318f4cfc30cd73
Emsisoft	Gen:Variant.Graftor.505430 (B)
Jiangmin	Trojan.Crusis.vh
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1132554
eGambit	Unsafe.AI_Score_90%
Antiy-AVL	Trojan/Generic.ASMalwS.271811F
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Arcabit	Trojan.Graftor.D7B656
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
ZoneAlarm	Trojan-Ransom.Win32.Foreign.oanw
GData	Gen:Variant.Graftor.505430
AhnLab-V3	Malware/Win32.Generic.C2630451
McAfee	Artemis!6C318F4CFC30
MAX	malware (ai score=100)
Malwarebytes	Ransom.Crysis
Panda	Trj/CI.A
Yandex	Trojan.Foreign!DYEirqvF+Fw
Ikarus	Trojan-Ransom.Crysis
Fortinet	W32/Foreign.OANW!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Foreign.HgIASOQA

How to remove Graftor.505430?

Graftor.505430 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X