Malware

Graftor.737742 removal guide

Malware Removal

The Graftor.737742 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.737742 virus can do?

  • Executable code extraction
  • Unconventionial language used in binary resources: Korean
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Graftor.737742?


File Info:

crc32: 8FCD4A6F
md5: 494d53024160aa11ac3164703628e12e
name: prjNewGumsaek.exe
sha1: fb49144570ab159cc22c5bbae47dc90639f0c97c
sha256: a16b1850570ea75035981611ad83b68d32f2de7a81a19803fdc8c67c8e1efdd7
sha512: 06d969cdfe7ee2cc6a06472bc55e2d7c0c5ba793903d4f0795bd5aab016cb8480a3c18f7b223a7c1b3ee82871ce19006397f858f54082dc0e1a62be37cee77d3
ssdeep: 98304:pwH3VKRtZwN9IzDm3K63JQOMRZGT33ArFZS0TAWSU5Xjlhi:xRtZwNZ3KyJQOM3GT33ArFZS0f/5Xjl
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0412 0x04b0
LegalCopyright: ClikSoft Co.,Ltd
InternalName: prjNewGumsaek
FileVersion: 1.00
CompanyName: xd074xb9adxc18cxd504xd2b8(xc8fc)
LegalTrademarks: Newxd074xb9ad
ProductName: Newxd074xb9ad
ProductVersion: 1.00
FileDescription: xccadxad6cxac80xc0c9
OriginalFilename: prjNewGumsaek.exe

Graftor.737742 also known as:

MicroWorld-eScanGen:Variant.Graftor.737742
FireEyeGen:Variant.Graftor.737742
McAfeeArtemis!494D53024160
K7AntiVirusNetWorm ( 700000151 )
BitDefenderGen:Variant.Graftor.737742
K7GWNetWorm ( 700000151 )
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002H09E420
GDataGen:Variant.Graftor.737742
AegisLabTrojan.Win32.Graftor.4!c
EmsisoftGen:Variant.Graftor.737742 (B)
McAfee-GW-EditionBehavesLike.Win32.Virus.wm
IkarusVirus.Win32.Virut
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Azden
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Graftor.DB41CE
VBA32BScope.Trojan.Bitrep
ALYacGen:Variant.Graftor.737742
Ad-AwareGen:Variant.Graftor.737742
PandaTrj/Genetic.gen
APEXMalicious
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Graftor.737742?

Graftor.737742 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment