What is "Graftor.728427 (B)"?

The Graftor.728427 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.728427 (B) virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.728427 (B)?


File Info:
crc32: 95EB4A2B
md5: f2a89880e8108c9f478cbf2d850aeeee
name: F2A89880E8108C9F478CBF2D850AEEEE.mlw
sha1: 94db08dc19256c2a78d0dff9cd90b4cabc9f8214
sha256: 0393b2b224bcc3464a5fc94dd15a4d738de7f181b2e285ff77d35b757b3ada78
sha512: 006b89855f97fb8d4467b29a0253e1d62b48121e9fca3f32463bae75e8d456302f1401086d2a40ef0c65d68949eedd58b9ea72f2af22a1f2cbfab262433707fa
ssdeep: 3072:E8wyRuLFd/OCV0SYCOL9SV3EbQ9m34eMO8qJzkS9x/p4/KXc21LSs+LWGSoZ+DEo:Sd/OK0SNy96eMO8qLQKvMLWVDE8JM5O
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Graftor.728427 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.728427
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Gen:Variant.Graftor.728427
Cybereason	malicious.0e8108
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
ClamAV	Win.Dropper.Tiggre-9845940-0
MicroWorld-eScan	Gen:Variant.Graftor.728427
Ad-Aware	Gen:Variant.Graftor.728427
Sophos	Generic PUA JE (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34692.uq0@ai2gVchb
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.f2a89880e8108c9f
Emsisoft	Gen:Variant.Graftor.728427 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Blamon.ox
Microsoft	Trojan:Win32/Wacatac.A!ml
AegisLab	Trojan.Win32.Malicious.4!c
GData	Win32.Trojan.Agent.WP
Acronis	suspicious
McAfee	GenericRXGZ-LL!F2A89880E810
MAX	malware (ai score=87)
VBA32	BScope.Trojan.StartPage
Malwarebytes	PUP.Optional.ChinAd
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R005H0CEP21
Rising	Malware.Heuristic!ET#87% (RDMK:cmRtazqD4cmsTkpgg9witt+lyYK9)
Ikarus	PUA.PUPStudio
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/Agent.WP!tr

How to remove Graftor.728427 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Graftor.728427 (B)”?