Malware

What is “Graftor.796418 (B)”?

Malware Removal

The Graftor.796418 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Graftor.796418 (B) virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Graftor.796418 (B)?


File Info:

crc32: 379311DB
md5: 8e53b98b89969dc8d84f672496f65abf
name: upload_file
sha1: 2b878beafee66b9b3f8e05a25478f0c6a0b1b19a
sha256: 73a1a609a5448805a55fa22b837362578fc815433b6da47f791546ae23bff7d1
sha512: 3438dd9018180a050b51203ad646b0a680fed8658d3928df459e5f5b58a5c0906f394fa2e1212cd8908577ff2bfdfdbb02dd0cd795f7a58ed6cc1e0cc164d67e
ssdeep: 12288:u+uGFmUgv4gQnlEShtNH0AETgmtshrJcwqSarWeo23u:uTGFr24FLht1fETgmuZaSayn23u
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Graftor.796418 (B) also known as:

FireEyeGen:Variant.Graftor.796418
BitDefenderGen:Variant.Graftor.796418
Invinceaheuristic
GDataGen:Variant.Graftor.796418
MicroWorld-eScanGen:Variant.Graftor.796418
ComodoHeur.Corrupt.PE@1z141z3
EmsisoftGen:Variant.Graftor.796418 (B)
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.Wacatac
ArcabitTrojan.Graftor.DC2702
Ad-AwareGen:Variant.Graftor.796418

How to remove Graftor.796418 (B)?

Graftor.796418 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment