Graftor.676615 malicious file

The Graftor.676615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.676615 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Attempts to modify proxy settings

Related domains:

api.ip138.com

down.xiald.com

down.popodi.com

ab.popodi.com

52740.png

How to determine Graftor.676615?


File Info:
crc32: 3C60239E
md5: f4c135efea1926c61de14338b3d25503
name: 25c625c125c425bb25c225bc25-19-52740appjv.exe
sha1: 660f65c432d1f068c89768377b374dc15e2cad5d
sha256: 0ba84cad39d9d7b12fb17c9f318a004368b096eb8897a184c082cccff9c03727
sha512: e9cbc12ecb024cb35532bcf611456fa87d193dd64b5581e08f0f2913cd29276f882bdec24262f7c662f023b3860694fe1537ff84ce521f6cb77832c39557d109
ssdeep: 49152:x30WcdFBDGzpI92ArEDPuetadb7uEHWA3Zw+:xkWO9GzpI2Tueta9mAF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2018
InternalName: x9ad8x901fx4e0bx8f7dx5668
FileVersion: 1.2.5.19117
CompanyName: x9ad8x901fx4e0bx8f7dx5668
ProductName: x9ad8x901fx4e0bx8f7dx5668
ProductVersion: 1,2,5,19117
FileDescription: x9ad8x901fx4e0bx8f7dx5668
OriginalFilename: Install.exe
Translation: 0x0804 0x04b0

Graftor.676615 also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Graftor.676615
FireEye	Gen:Variant.Graftor.676615
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Gen:Variant.Graftor.676615
Malwarebytes	PUP.Optional.Softcnapp
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
K7AntiVirus	Adware ( 004d97001 )
BitDefender	Gen:Variant.Graftor.676615
K7GW	Adware ( 004d97001 )
TrendMicro	TROJ_GEN.R007C0PJ819
Cyren	W32/Trojan.YXTV-8277
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R007C0PJ819
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
ViRobot	Adware.Softcnapp.1953080.B
Tencent	Win32.Trojan.Generic.Eegv
Ad-Aware	Gen:Variant.Graftor.676615
Sophos	Softcnapp (PUA)
Comodo	Malware@#2s8zimuyntskz
DrWeb	Adware.Softcnapp.97
Zillya	Trojan.Generic.Win32.956006
Invincea	heuristic
McAfee-GW-Edition	GenericRXHC-RW!F4C135EFEA19
Emsisoft	Gen:Variant.Graftor.676615 (B)
APEX	Malicious
GData	Gen:Variant.Graftor.676615
Jiangmin	Trojan.APosT.kg
Webroot	W32.Adware.Gen
Microsoft	PUA:Win32/CoinMiner
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Generic
SentinelOne	DFI – Malicious PE
AhnLab-V3	Malware/RL.Generic.R257946
McAfee	GenericRXHC-RW!F4C135EFEA19
VBA32	BScope.Adware.Puwaders
ESET-NOD32	a variant of Win32/Softcnapp.J potentially unwanted
Rising	PUA.Puamson!8.108E8 (C64:YzY0Ogwm3dDzhWGI)
Ikarus	PUA.Softcnapp
eGambit	Unsafe.AI_Score_97%
Fortinet	Riskware/Softcnapp
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_80% (D)
MaxSecure	Trojan.Malware.7164915.susgen

How to remove Graftor.676615?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Graftor.676615 malicious file