Graftor.721460 malicious file

The Graftor.721460 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.721460 virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Attempts to delete volume shadow copies
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.721460?


File Info:
crc32: 28F19F8B
md5: d0b0abcc7da57a45754dc51f82b895b9
name: D0B0ABCC7DA57A45754DC51F82B895B9.mlw
sha1: 083c1f07e0402262a9fa89842b0e23830baf3411
sha256: 5eed0a3f19bc534676261103f79423a9df962d7734d284d3925733b6eefa5e81
sha512: b4654c646e6e465ceb4336bd1f3002bbd2d347ad6cf87d7dcedfb1d051839e58695c57e271061b57107af35374f017badaeb56dd43a3a54e92a0ec7f14b9e27f
ssdeep: 24576:Ay9MHihqN5G2+Q5JJss/aZuW22yfA2xXezKZCfR3aAglyTY/imvWM5TXcylGK3x:vjK9im+M5TXcyEK3xX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: O&K Software Ltd. 2006-2014 (c)
InternalName: Gender        countbygender Remain
FileVersion: 7.7.9.5
CompanyName: O&K Software Ltd.
PrivateBuild: 7.7.9.5
LegalTrademarks: O&K Software Ltd. 2006-2014 (c)
ProductName: Gender countbygender Remain
Languages: English
ProductVersion: 7.7.9.5
FileDescription: Repackage Synchandler Vserver Elevated Getdinners
OriginalFilename: Gender    countbygender Remain
Translation: 0x0409 0x04b0

Graftor.721460 also known as:

K7AntiVirus	Trojan ( 005631871 )
Lionic	Trojan.Win32.Dropback.b!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop11.51565
ALYac	Gen:Variant.Graftor.721460
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1966082
Sangfor	Trojan.Win32.Occamy.C
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Dropback.1f73fbbe
K7GW	Trojan ( 005631871 )
Cybereason	malicious.c7da57
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HCDN
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Dropper.Win32.Dropback.ji
BitDefender	Gen:Variant.Graftor.721460
NANO-Antivirus	Trojan.Win32.Dropback.hghgox
MicroWorld-eScan	Gen:Variant.Graftor.721460
Tencent	Win32.Trojan-dropper.Dropback.Wqmi
Ad-Aware	Gen:Variant.Graftor.721460
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_HPGen-37b
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
FireEye	Gen:Variant.Graftor.721460
Emsisoft	Gen:Variant.Graftor.721460 (B)
Webroot	W32.Trojan.Gen
Avira	TR/AD.Crysis.paztv
Antiy-AVL	Trojan/Generic.ASMalwS.3021430
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Graftor.721460
McAfee	GenericRXKD-YD!D0B0ABCC7DA5
MAX	malware (ai score=88)
VBA32	TrojanDropper.Dropback
Panda	Trj/CI.A
TrendMicro-HouseCall	Mal_HPGen-37b
Yandex	Trojan.Kryptik!UQ+eiHIYaUY
Ikarus	Trojan-Spy.Remcos
Fortinet	W32/Dropback.HCDN!tr.ransom
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Graftor.721460?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Graftor.721460 malicious file