Graftor.512282 (file analysis)

Malware Removal

The Graftor.512282 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Graftor.512282 virus can do?

  • Executable code extraction
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Deletes its original binary from disk
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

Related domains:

pcwap.zzyumi.com

How to determine Graftor.512282?


File Info:

crc32: 8E40B447
md5: 635611d82b96ba5cf3fe71ba5a6be2f6
name: ccav.exe
sha1: efd3982ff7b8f3052d2ea08b3768fe181fba356e
sha256: 028702b0601e077f244246c4e6fd11cca80c8f9d6c47666bd752d79459f695c1
sha512: 5ec3087d3bbf10e3cf681522366ecc099d68773fb7c83023f031c6f96ebecae0447157d4e49fcb34711f65afa0a2fc333c33daa3e25c87e81da5a17f5cdb1eea
ssdeep: 1536:8rfsSdEfauoCgEalDjZV/yJnSk6kIukkhaHcFTp3oiFxRTtU7VbySSDsqAJwqeC:8rESmf4lxVKngudYiFNobSws2P
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Graftor.512282 also known as:

MicroWorld-eScanGen:Variant.Graftor.512282
FireEyeGeneric.mg.635611d82b96ba5c
Qihoo-360Win32/Backdoor.Agent.ADM
McAfeeArtemis!635611D82B96
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 004fbf8e1 )
BitDefenderGen:Variant.Graftor.512282
K7GWTrojan ( 004fbf8e1 )
Cybereasonmalicious.82b96b
TrendMicroBKDR_ZEGOST.SM34
SymantecBackdoor.Zegost
APEXMalicious
AvastWin32:Adware-gen [Adw]
ClamAVWin.Dropper.Gh0stRAT-7445107-0
GDataGen:Variant.Graftor.512282
KasperskyBackdoor.Win32.Farfli.bquq
AlibabaBackdoor:Win32/Shellex.190111
NANO-AntivirusTrojan.Win32.Kryptik.epntbq
ViRobotTrojan.Win32.Z.Graftor.92160.C
AegisLabTrojan.Win32.Farfli.m!c
TencentWin32.Backdoor.Farfli.Wmss
Endgamemalicious (moderate confidence)
EmsisoftGen:Variant.Graftor.512282 (B)
ComodoBackdoor.Win32.Farfli.FHH@7ok41s
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Hottrend.627
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Sdbot.nc
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.Farfli
JiangminTrojan.Generic.wfzk
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.SGeneric
ArcabitTrojan.Graftor.D7D11A
ZoneAlarmBackdoor.Win32.Farfli.bquq
MicrosoftTrojan:Win32/Zegost.CJ!bit
VBA32Trojan.Hottrend
ALYacGen:Variant.Graftor.512282
MAXmalware (ai score=85)
Ad-AwareGen:Variant.Graftor.512282
ESET-NOD32a variant of Win32/Kryptik.FHSE
TrendMicro-HouseCallBKDR_ZEGOST.SM34
RisingTrojan.Kryptik!1.AAD1 (CLOUD)
YandexBackdoor.Farfli!UjHPXvhLOHQ
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/GenKryptik.BJAB!tr
BitDefenderThetaGen:NN.ZexaF.34100.fmGfaOUcfyn
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.73422420.susgen

How to remove Graftor.512282?

Graftor.512282 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment