Categories: Malware

Graftor.607895 removal tips

The Graftor.607895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.607895 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Attempts to modify UAC prompt behavior

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.607895?


File Info:
crc32: 262829B0md5: ef2f226f1588c176a7a43b7b2f898e32name: autobuilder-v2.exesha1: caf1c8def201dff14a573faf13772650b5492a20sha256: 37a03ff5896b1dc0137d837429ca92d795446f46abc58593ac5fb68959b78a53sha512: 33fc0ed0a7f4b8795012400544d5b213c640371d87ee6a6b891da7b60f3ed207cf135283b1fa3d027053c09fd393df23643892ff7b4e14e01b8a894aeeadcc64ssdeep: 98304:XO1WpCnqD+5/iKlBRV1b1MXEJTYz085TRr+F/u:eqa5//JTJTz85T1type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
ProgramID: ProductName: FileVersion: 1.0.0.0ProductVersion: 1.0.0.0FileDescription: Translation: 0x0409 0x04e4

Graftor.607895 also known as:

MicroWorld-eScan	Gen:Variant.Graftor.607895
FireEye	Generic.mg.ef2f226f1588c176
McAfee	Artemis!EF2F226F1588
ALYac	Gen:Variant.Graftor.607895
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1267564
Sangfor	Malware
K7AntiVirus	Trojan ( 0056369f1 )
BitDefender	Gen:Variant.Graftor.607895
K7GW	Trojan ( 0056369f1 )
Cybereason	malicious.f1588c
BitDefenderTheta	Gen:NN.ZexaF.34104.8pKfaCHmg@hi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.Growtopia.B
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
GData	Gen:Variant.Graftor.607895
Kaspersky	HEUR:Trojan-GameThief.Win32.Worgtop.gen
Alibaba	Trojan:Win32/Starter.ali2000005
NANO-Antivirus	Trojan.Win32.OnLineGames.guuagd
ViRobot	Trojan.Win32.Z.Razy.4141568
AegisLab	Trojan.Win32.Razy.4!c
Endgame	malicious (moderate confidence)
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1042486
DrWeb	Trojan.PWS.Stealer.27849
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DBO20
McAfee-GW-Edition	BehavesLike.Win32.DealPly.wc
Trapmine	malicious.high.ml.score
CMC	Trojan-PWS.Win32.Kykymber.1!O
Emsisoft	Gen:Variant.Graftor.607895 (B)
Ikarus	Trojan-PSW.OnlineGames
Jiangmin	Trojan.PSW.MSIL.qce
eGambit	Unsafe.AI_Score_83%
Avira	HEUR/AGEN.1042486
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Graftor.D94697
ZoneAlarm	HEUR:Trojan-GameThief.Win32.Worgtop.gen
Microsoft	PWS:Win32/Graftor.S!MSR
Acronis	suspicious
VBA32	Trojan.Downloader
Ad-Aware	Gen:Variant.Graftor.607895
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DBO20
Rising	Stealer.OnLineGames!8.131 (CLOUD)
Yandex	Trojan.PWS.OnLineGames!QCVqvFuYSPo
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Graftor.QZN!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Trojan.70c