Categories: Malware

Graftor.51046 removal instruction

The Graftor.51046 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.51046 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Enumerates running processes
Authenticode signature is invalid
A ping command was executed with the -n argument possibly to delay analysis
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Uses suspicious command line tools or Windows utilities

How to determine Graftor.51046?


File Info:
name: 594AE815459661611FCB.mlwpath: /opt/CAPEv2/storage/binaries/4daefde28eba543b623d26003bd60bfe46d2392846736a31fde4bb2accce1b24crc32: F500D0C4md5: 594ae815459661611fcbcd99a05c1836sha1: dac990cc9500914405be24a752bb6652ffd899b5sha256: 4daefde28eba543b623d26003bd60bfe46d2392846736a31fde4bb2accce1b24sha512: 2d522cd6fcf9bdb6df8a1408c697e48de5383599067b67bd1a7573ae25bea8e1b204093cb032b6167d0b0aed3075614a5f9e5e1cf77a51af4ac051d9d265a9aassdeep: 3072:8RrKQP/EBnnZ1pD7ZCAmOLEBrkE3YkKXi3LAnU7e81GKxST+tPi8x:8RrKS/CnZ1pD7ZC9JkEIkKXi3LTj6Ttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T155340933DB20D8A6F03943B626B70739AE70D35128B04967EBD8CEF1AD62661DB4750Csha3_384: 884337b797bfecd88d12dbc4f81538c52422d4d50a90f375df66fb71f722aea2502c4d0fd63f2d32c97ed227b708a3caep_bytes: 558bec6aff6810014300688870420064timestamp: 2011-09-03 03:07:46
Version Info:
FileVersion: 1.0.3.0ProductVersion: 1.0.0.0Translation: 0xffff 0x0000

Graftor.51046 also known as:

Bkav	W32.AIDetect.malware1
DrWeb	BackDoor.Pigeon.61623
MicroWorld-eScan	Gen:Variant.Graftor.51046
FireEye	Generic.mg.594ae81545966161
CAT-QuickHeal	Hacktool.Flystudio.16558
McAfee	Artemis!594AE8154596
Cylance	Unsafe
Zillya	Backdoor.Hupigon.Win32.124397
K7AntiVirus	Trojan ( 005713d01 )
Alibaba	Trojan:Win32/GenMalicious.29972a2a
K7GW	Trojan ( 005713d01 )
Cybereason	malicious.545966
BitDefenderTheta	Gen:NN.ZexaF.34294.oq0@aOEyX!ji
Cyren	W32/Kryptik.BWY.gen!Eldorado
ESET-NOD32	Win32/Agent.TCA
Paloalto	generic.ml
ClamAV	Win.Trojan.Siscos-436
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Graftor.51046
NANO-Antivirus	Trojan.Win32.Siscos.bddqvz
Avast	Win32:GenMalicious-EWF [Trj]
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Variant.Graftor.51046
Comodo	Malware@#1813r4ym657ip
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dm
Emsisoft	Gen:Variant.Graftor.51046 (B)
Ikarus	AdWare.NaviPromo
GData	Win32.Trojan.PSE.1ETEWJE
Jiangmin	Trojan/Generic.afqbg
eGambit	Trojan.Generic
Avira	BDS/Hupigon.259768
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.EA05C
Kingsoft	Heur.SSC.176471.1216.(kcloud)
Arcabit	Trojan.Graftor.DC766
ViRobot	Trojan.Win32.A.Siscos.241664
Microsoft	Trojan:Win32/Sisron
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Siscos.C77884
VBA32	BScope.Backdoor.Agent
ALYac	Gen:Variant.Graftor.51046
TACHYON	Backdoor/W32.Hupigon.241664.T
Rising	Trojan.Injector!1.A1C3 (CLASSIC)
Yandex	Trojan.Siscos!98WDNGq+7BU
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.2919805.susgen
Fortinet	W32/CoinMiner.WP!tr
Webroot	W32.Gen.Bt
AVG	Win32:GenMalicious-EWF [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_80% (D)