Categories: Malware

Graftor.678 removal guide

The Graftor.678 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.678 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings
Creates known PcClient mutex and/or file changes.

How to determine Graftor.678?


File Info:
name: 4B1914ECB0BE76431481.mlwpath: /opt/CAPEv2/storage/binaries/45e24e5f04d83213f47b47486785a481b575ec5f415bec715676b5f520dc0e8acrc32: C09D0926md5: 4b1914ecb0be7643148135dd67a44852sha1: b3cce86dc8917eed5615abd0471955eaf605f2cesha256: 45e24e5f04d83213f47b47486785a481b575ec5f415bec715676b5f520dc0e8asha512: de1b856786e5f97299081a3028bcc0b4d9c835266cd36ef22f802fd18d79f4d2ed13fad833ddba756d7ba958d2f0227862e7f58912e347b85b5520ae4559bee8ssdeep: 384:xuxpIu9L1816d7faDLgcvCUVkFmWVSi42/Qx:xuxp38cf0gcvgFN/J/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19F823B03ED044AF7CC44827060A3294DE5705C730BA55D2F6F6DEEAC2EB869279B764Esha3_384: 7cc58280dead8ea205c8bd865039a26ece2f218bb3a1549ab749c47782b274c6553a73bf4a5dae9a544c6af3783c0e9dep_bytes: 558bec6aff681015400068961c400064timestamp: 2011-05-26 13:35:48
Version Info:
0: [No Data]

Graftor.678 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Magania.lepg
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader3.7934
MicroWorld-eScan	Gen:Variant.Graftor.678
FireEye	Generic.mg.4b1914ecb0be7643
CAT-QuickHeal	Downloader.Small.11945
Skyhigh	BehavesLike.Win32.PWSZbot.lm
ALYac	Gen:Variant.Graftor.678
Cylance	unsafe
VIPRE	Gen:Variant.Graftor.678
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan-Downloader ( 002b6c9a1 )
BitDefender	Gen:Variant.Graftor.678
K7GW	Trojan-Downloader ( 002b6c9a1 )
Cybereason	malicious.dc8917
Arcabit	Trojan.Graftor.678
BitDefenderTheta	Gen:NN.ZexaF.36792.biW@auvI0Ueb
VirIT	Trojan.Win32.Generic.BOJA
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Small.PJP
APEX	Malicious
ClamAV	Win.Trojan.Small-20870
Kaspersky	Trojan-Dropper.Win32.Small.hms
Alibaba	TrojanDownloader:Win32/Lepasud.e55c7ec3
NANO-Antivirus	Trojan.Win32.Small.dlprwb
Rising	Trojan.DL.Win32.Undef.thl (CLASSIC)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Downloader.Gen
Zillya	Dropper.Small.Win32.7527
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Graftor.678 (B)
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=100)
Jiangmin	TrojanDropper.Small.fam
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Downloader.Gen
Varist	W32/Downloader-Sml!Eldorado
Antiy-AVL	Trojan[Dropper]/Win32.Small
Kingsoft	Win32.Troj.Undef.a
Xcitium	Suspicious@#pip44ks120tg
Microsoft	TrojanDownloader:Win32/Small.gen!F
ZoneAlarm	Trojan-Dropper.Win32.Small.hms
GData	Gen:Variant.Graftor.678
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Scar.R6140
McAfee	GenericR-DNR!4B1914ECB0BE
TACHYON	Trojan/W32.Small.17920.KW
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.Tiggre
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
Tencent	Trojan.Win32.FakeLpk.mc
Yandex	Trojan.GenAsa!7lvEq0vKGdc
Ikarus	Trojan-PSW.OnlineGames
MaxSecure	Trojan.Malware.2588.susgen
Fortinet	W32/Small.HMS!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)