How to remove "Graftor.754068"?

The Graftor.754068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.754068 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Creates RWX memory
Expresses interest in specific running processes
Reads data out of its own binary image
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

pbstat.haotukankan.com

a.tomx.xyz

How to determine Graftor.754068?


File Info:
crc32: 1BCFFF27
md5: 5a0966aa5bfead5c26541c0155f2e21e
name: haotu_v2.0.2.1_guanwang_3.exe
sha1: 93d93c83a0e3e30370cde7447b01461edb07c350
sha256: 472425fae4183684078abea5f51b6067d02c8bbd1cf46c681758ba34e42c8b31
sha512: 62f547708acb5023368a72980789fbdb810648c141c2ee99efe20bfa1cc5142d3f7cd5b1ade36ba28836e2d8b208f1096f5ff553508976aa0c65f791969c33ce
ssdeep: 196608:HhI7+zB/Mac7cJyoZZ/Hu1z8c2kYFd7qCCtSeLmdO+YrQjxa3n1IZGpUCvZ:HdVc7cb/Hu1zDhY/qCISu6Oj8jI3w6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) x9752x67a3x7f51x7edcx79d1x6280x6709x9650x516cx53f8 All Rights Reserved
InternalName: install.exe
CompanyShortName: x9752x67a3x7f51x7edc
FileVersion: 2.0.2.1
CompanyName: x9752x67a3x7f51x7edcx79d1x6280x6709x9650x516cx53f8
BuildTag: 2020/03/31 [001]
ProductShortName: x597dx56fex770bx770b
ProductName: x597dx56fex770bx770b
ProductVersion: 2.0.2.1
FileDescription: x597dx56fex770bx770bx5b89x88c5x5305
OriginalFilename: install.exe
Translation: 0x0804 0x04b0

Graftor.754068 also known as:

MicroWorld-eScan	Gen:Variant.Graftor.754068
McAfee	Artemis!5A0966AA5BFE
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Adware ( 005635451 )
BitDefender	Gen:Variant.Graftor.754068
K7GW	Adware ( 005635451 )
Invincea	heuristic
APEX	Malicious
GData	Gen:Variant.Graftor.754068
Alibaba	Backdoor:Win32/KZip.89f3a025
NANO-Antivirus	Riskware.Win32.Kuaizip.hjmbbg
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazqTwrpQm/kBfybLDXFPwykV)
Endgame	malicious (high confidence)
DrWeb	Program.Kuaizip.5
FireEye	Gen:Variant.Graftor.754068
Emsisoft	Gen:Variant.Graftor.754068 (B)
Arcabit	Trojan.Graftor.DB8194
Microsoft	PUA:Win32/CoinMiner
VBA32	BScope.Adware.KuaiZip
ALYac	Gen:Variant.Graftor.754068
MAX	malware (ai score=87)
Ad-Aware	Gen:Variant.Graftor.754068
ESET-NOD32	a variant of Win32/KuaiZip.Z.gen potentially unwanted
Fortinet	Riskware/KuaiZip
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove Graftor.754068?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Graftor.754068”?