Malware

Graftor.761998 (B) malicious file

Malware Removal

The Graftor.761998 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.761998 (B) virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Graftor.761998 (B)?


File Info:

crc32: 21D44E42
md5: e893cd171920f0f216fcc5340c36db04
name: tmp5wh6_ph5
sha1: aacc81387fe1f6f86a3714d7d9a9b7fcbc0921a8
sha256: 9690993f39df21717bc1a4b371f458c74cb4dcab477436144661c4c337898fe1
sha512: 883ef58599d4d8c187fdaff0f6428696a92ad54b031550f14ec5b75e5b41f3b63cbeb50f784826cc6a4c059c50fa1b429685dd7018d5803e807785915c23934f
ssdeep: 24576:bAOcZFXkpI0GCYYzMlLWa0RB4wp6IyhmkdT:9lK0GDYYF0RBfyhm6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Graftor.761998 (B) also known as:

FireEyeGeneric.mg.e893cd171920f0f2
ZillyaTrojan.Agent.Win32.1289947
Cybereasonmalicious.87fe1f
APEXMalicious
F-SecureHeuristic.HEUR/AGEN.1106416
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Backdoor.fc
EmsisoftGen:Variant.Graftor.761998 (B)
JiangminTrojan.Bsymem.vy
AviraHEUR/AGEN.1106416
Endgamemalicious (high confidence)
MicrosoftProgram:Win32/Wacapew.C!ml
CynetMalicious (score: 85)
eGambitUnsafe.AI_Score_99%
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360HEUR/QVM10.1.CF43.Malware.Gen

How to remove Graftor.761998 (B)?

Graftor.761998 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment