Malware

Graftor.506354 removal instruction

Malware Removal

The Graftor.506354 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.506354 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system

Related domains:

alipenfgjazzi.com

How to determine Graftor.506354?


File Info:

crc32: D565B6D0
md5: 5a4f2a53a1be2db4a3f8dafd8bfdbb4b
name: 5A4F2A53A1BE2DB4A3F8DAFD8BFDBB4B.mlw
sha1: 7fdb97384837eea25e33fe2eadd6cbf7aa9ad051
sha256: 4e0334f0514e3e2c1475b22752b0640d7898a0c5e71beccd2d28bf603f3ec31a
sha512: 8f048254dfc68711b0df66f183be3ed96fa6e0a4b6bc52658ac56e218a82ab32f29136002907cc6cd08f41f7f2be112b9aecd799c8da0d6971ef3fc130a79e28
ssdeep: 6144:csYgLrRxsiZxxq8vnS/mVIP8LXEsFvvmLmRPAmgBmrtsZ+iOnY/+KI:coRa0xq8vnS/mVOA0+B5IaswnK+KI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Alibaba (C) 2007-2015
InternalName: Type Ncs
FileVersion: 6.6.78.3
CompanyName: Alibaba
FileDescription: Pitch Twoand Around Hijackthis
Comments: Pitch Twoand Around Hijackthis
ProductName: Type Ncs
ProductVersion: 6.6.78.3
PrivateBuild: 6.6.78.3
OriginalFilename: Type Ncs
Translation: 0x0409 0x04b0

Graftor.506354 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.24300
MicroWorld-eScanGen:Variant.Graftor.506354
FireEyeGeneric.mg.5a4f2a53a1be2db4
Qihoo-360Win32/Trojan.Ransom.1bb
McAfeeArtemis!5A4F2A53A1BE
AegisLabTrojan.Win32.Generic.4!c
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
BitDefenderGen:Variant.Graftor.506354
K7GWTrojan ( 0053922e1 )
K7AntiVirusTrojan ( 0053922e1 )
BitDefenderThetaGen:NN.ZexaF.34590.Lq0@a4Q6t@gi
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-Ransom.Win32.Blocker.ldnf
AlibabaRansom:Win32/Blocker.91f631b0
NANO-AntivirusTrojan.Win32.Yakes.fhmtyf
RisingRansom.Blocker!8.12A (CLOUD)
Ad-AwareGen:Variant.Graftor.506354
SophosMal/Generic-S
ComodoMalware@#3ozhj6whv3pdi
F-SecureTrojan.TR/PSW.Stealer.sdjto
McAfee-GW-EditionBehavesLike.Win32.Generic.jh
EmsisoftGen:Variant.Graftor.506354 (B)
IkarusTrojan-Spy.Remcos
AviraTR/PSW.Stealer.sdjto
Antiy-AVLTrojan[Ransom]/Win32.Blocker
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Graftor.D7B9F2
ZoneAlarmTrojan-Ransom.Win32.Blocker.ldnf
GDataGen:Variant.Graftor.506354
CynetMalicious (score: 100)
VBA32Trojan.Yakes
ALYacGen:Variant.Graftor.506354
MAXmalware (ai score=81)
MalwarebytesSpyware.AzorUlt
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.GONC
TencentWin32.Trojan.Blocker.Swbn
YandexTrojan.Blocker!t8V5eggL3tA
FortinetW32/GenKryptik.CGSD!tr
AVGWin32:Malware-gen
Cybereasonmalicious.3a1be2
AvastWin32:Malware-gen

How to remove Graftor.506354?

Graftor.506354 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment