Graftor.770353 removal

The Graftor.770353 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.770353 virus can do?

Executable code extraction
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Deletes its original binary from disk
Creates a copy of itself

Related domains:

xp116.xyz

How to determine Graftor.770353?


File Info:
crc32: D3A52B26
md5: b8623496eaaeaa95acd239da32099620
name: B8623496EAAEAA95ACD239DA32099620.mlw
sha1: 115fd31af6b59a9dd69f2f95ee1aa4a4bd2632f5
sha256: 88dd1107f603d79826ee256071e42d21dd152cba6f9fb4dea93e8e846a74aa47
sha512: 9cab0d355a60bb5633699eb71d7efd7ad97364a8cfc632301b8e2ac8ee401c863fe2e8f0f76ba71d63bd8aaa741a9828c2c79540793a1195549d7a3e47e87976
ssdeep: 3072:ABLgcHxDRG+cZllzitt48IkOK8yB8e9dyTUe2BteMV8mRpg:0LgAVRc+Y8Ik6SU+gm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998
InternalName: MIDIPLAYER
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: MIDIPLAYER Application
ProductVersion: 1, 0, 0, 1
FileDescription: MIDIPLAYER MFC Application
OriginalFilename: MIDIPLAYER.EXE
Translation: 0x0409 0x04b0

Graftor.770353 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Malware.Farfli-6824109-0
McAfee	GenericRXAA-AA!B8623496EAAE
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Farfli.DSK
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Backdoor:Win32/Farfli.855f3b61
K7GW	Trojan ( 004d3cae1 )
K7AntiVirus	Trojan ( 004d3cae1 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 85)
Kaspersky	Backdoor.Win32.Farfli.brwy
BitDefender	Gen:Variant.Graftor.770353
NANO-Antivirus	Trojan.Win32.Farfli.hnavsy
AegisLab	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Graftor.770353
Rising	Backdoor.Farfli!8.B4 (CLOUD)
Ad-Aware	Gen:Variant.Graftor.770353
Sophos	Mal/Generic-S
Comodo	Malware@#tj2267p4608k
F-Secure	Trojan.TR/Injector.nqxjv
TrendMicro	Backdoor.Win32.ZEGOST.SMAL02
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Graftor.770353
Emsisoft	Gen:Variant.Graftor.770353 (B)
Jiangmin	Backdoor.Farfli.doj
Avira	TR/Injector.nqxjv
Antiy-AVL	Trojan/Win32.Farfli
Microsoft	Trojan:Win32/Farfli.DSK!MTB
Arcabit	Trojan.Graftor.DBC131
ZoneAlarm	Backdoor.Win32.Farfli.brwy
GData	Gen:Variant.Graftor.770353
AhnLab-V3	Malware/Win32.Backdoor.C4129432
VBA32	BScope.Trojan.Pynamer
ALYac	Gen:Variant.Graftor.770353
MAX	malware (ai score=80)
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.CJVZ
TrendMicro-HouseCall	Backdoor.Win32.ZEGOST.SMAL02
Tencent	Malware.Win32.Gencirc.10cdcd76
Yandex	Trojan.Injector!7PpJZvzclIE
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.102569733.susgen
Fortinet	W32/Kryptik.DDGL!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.6eaaea
Avast	Win32:Trojan-gen
Qihoo-360	Win32/Backdoor.Farfli.HgIASOMA

How to remove Graftor.770353?

Graftor.770353 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X