Categories: Malware

Should I remove “Graftor.555449”?

The Graftor.555449 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.555449 virus can do?

Creates RWX memory
Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
A scripting utility was executed
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.555449?


File Info:
crc32: BC24AB93md5: 06d3b692d7abe60f4ac06342b3283a85name: 06D3B692D7ABE60F4AC06342B3283A85.mlwsha1: 28635a98f6a5d0e35f97b18e334ec2d06099da62sha256: 1a368f726578a251ad865b24e1e8a166d4fc5937373dd71b9c1662725fce3aedsha512: 2474df88e3b70a407fdabdd60a2713b152b42e7be668b09083fabd2853df98b9601d74e661bb166a871492a5a612dade12a3928ac1ec93d946d165bf528e836fssdeep: 12288:RgnJrAxqupV6PGgErQ3KwUcgxOxqHpYDMJapcdFpO08bhZ:GnJSqupViGgBNUTOxmLXPpO08dZtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Graftor.555449 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Siggen7.22063
Cynet	Malicious (score: 99)
CAT-QuickHeal	Backdoor.MsilIH.S12061634
ALYac	Gen:Variant.Graftor.555449
Cylance	Unsafe
Zillya	Backdoor.SpyGate.Win32.1035
Alibaba	Backdoor:MSIL/SpyGate.c4e3da2c
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.2d7abe
Cyren	W32/Ulise.CU.gen!Eldorado
Symantec	Backdoor.Ratenjay
ESET-NOD32	a variant of Generik.EXNZVQL
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Jacard-7423990-0
Kaspersky	Backdoor.MSIL.SpyGate.plg
BitDefender	Gen:Variant.Graftor.555449
NANO-Antivirus	Trojan.Win32.Bladabindi.emgbby
MicroWorld-eScan	Gen:Variant.Graftor.555449
Tencent	Msil.Backdoor.Spygate.Hff
Sophos	Generic Reputation PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Worm.hc
FireEye	Generic.mg.06d3b692d7abe60f
Emsisoft	Gen:Variant.Graftor.555449 (B)
Jiangmin	Backdoor.MSIL.lgk
Avira	BDS/SpyGate.denpe
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Malware.Win32.Gen.cc!s1
AegisLab	Trojan.MSIL.SpyGate.m!c
GData	Gen:Variant.Graftor.555449 (2x)
McAfee	Artemis!06D3B692D7AB
MAX	malware (ai score=81)
VBA32	Backdoor.MSIL.SpyGate
Malwarebytes	Malware.AI.1253657794
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CE321
Rising	Backdoor.SpyGate!8.E154 (CLOUD)
Yandex	Trojan.GenAsa!eH8+VWpU9Fg
Ikarus	Trojan.Atros5
Fortinet	W32/SpyGate.PLG!tr.bdr
AVG	Win32:Malware-gen