Malware

Graftor.787692 removal instruction

Malware Removal

The Graftor.787692 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.787692 virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Graftor.787692?


File Info:

crc32: E7F5C9F9
md5: 437b73bfba380a0560af7bc1e0fd93bd
name: twinkler_01.exe
sha1: 9f350c977b4e20826754703483bd8508acfbf735
sha256: 6ea98d1bfeb9cc9262cec7fb18d892f389cc8e2731a53aa6b997e7fdc9c821c2
sha512: 56607154e705dbacc25caeedfe9ffc488bef7f6c1bb5c94fbb250c14919851821fb438b6016a6fd512bf3aa89663d487edc00479bb208738813644e166a2c4b3
ssdeep: 24576:jkoq9/PHCiq4wAb7qv65lZaXt6a3JIzcTIcbSFI2TKHwzHYrA2:jsRKw9b7qKkYqIslohTKHwzR2
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) 2020 x4e0ax6d77x6c38x695ax7f51x7edcx79d1x6280x6709x9650x516cx53f8
InternalName: news.exe
FileVersion: 1.0.0.1
CompanyName: x4e0ax6d77x6c38x695ax7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: x62f7x8d1dx5154
ProductVersion: 1.0.0.1
FileDescription: x8ff7x4f60x65b0x95fb
OriginalFilename: news.exe
Translation: 0x0804 0x04b0

Graftor.787692 also known as:

MicroWorld-eScanGen:Variant.Graftor.787692
FireEyeGen:Variant.Graftor.787692
CAT-QuickHealTrojanDownloader.Adload
ALYacGen:Variant.Graftor.787692
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan-Downloader ( 0056922b1 )
BitDefenderGen:Variant.Graftor.787692
K7GWTrojan-Downloader ( 0056922b1 )
TrendMicroTROJ_GEN.R002C0DGU20
CyrenW32/Trojan.DPCY-0699
SymantecTrojan.Gen.MBT
AvastWin32:TrojanX-gen [Trj]
GDataGen:Variant.Graftor.787692
Kasperskynot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
AlibabaTrojan:Win32/ComponentBased.5b7451f4
Ad-AwareGen:Variant.Graftor.787692
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1100691
EmsisoftGen:Variant.Graftor.787692 (B)
IkarusTrojan-Downloader.Win32.Adload
JiangminAdWare.ComponentBased.as
AviraHEUR/AGEN.1100691
Endgamemalicious (high confidence)
ArcabitTrojan.Graftor.DC04EC
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
MicrosoftTrojanDownloader:Win32/Adload.A!MTB
CynetMalicious (score: 85)
AhnLab-V3PUP/Win32.AdLoad.C3923949
McAfeeArtemis!437B73BFBA38
MAXmalware (ai score=84)
VBA32Adware.ComponentBased
ESET-NOD32a variant of Win32/TrojanDownloader.Adload.NUS
TrendMicro-HouseCallTROJ_GEN.R002C0DGU20
RisingDownloader.Adload!8.D1 (CLOUD)
SentinelOneDFI – Suspicious PE
FortinetW32/Adload.NUS!tr.dldr
AVGWin32:TrojanX-gen [Trj]
Qihoo-360Win32/Virus.Adware.a94

How to remove Graftor.787692?

Graftor.787692 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment