Graftor.849674 removal guide

The Graftor.849674 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.849674 virus can do?

Anomalous binary characteristics

How to determine Graftor.849674?


File Info:
crc32: 3CA535F1
md5: a6db1982f3c144576f1fa5bea0e95f64
name: A6DB1982F3C144576F1FA5BEA0E95F64.mlw
sha1: eb8441a85d72fb5e3e998c7cee2a138610906a1e
sha256: e8a0e80dfc520bf7e76c33a90ed6d286e8729e9defe6bb7da2f38bc2db33f399
sha512: 639cd368dd683f182db88dafe7e11d44f7496035d7cdbf4a367d1844f8f03ee4035527cbbdc66f7a52029f944016c2d51926252e9b61ff18893b6076dc948885
ssdeep: 1536:bffvVPTgn4PlAQYBaaO6KzQ6vnXVEhXpwiRtdgokCvej+YRGEJaH9zwGj9NZXQLJ:bnt1uQAS25wiRJv3YRbJadEPbkPnoYI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Graftor.849674 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Ryuk
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Generic.3ed10fd1
Cyren	W32/Trojan.HBHP-9249
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:Ryuk-A [Trj]
ClamAV	Win.Ransomware.Ryuk-9779552-0
BitDefender	Gen:Variant.Graftor.849674
ViRobot	Trojan.Win32.S.Agent.126464.MM
MicroWorld-eScan	Gen:Variant.Graftor.849674
Ad-Aware	Gen:Variant.Graftor.849674
Sophos	Mal/Generic-R + Troj/Ryuk-AX
Comodo	Malware@#2bkzvz7ozljnk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.a6db1982f3c14457
Emsisoft	Trojan.FileCoder (A)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_97%
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Ransom:Win32/Ruyk.A!ibt
Arcabit	Trojan.Graftor.DCF70A
AegisLab	Trojan.Win32.Ryuk.4!c
GData	Gen:Variant.Graftor.849674
AhnLab-V3	Trojan/Win32.RansomCrypt.C4204627
McAfee	Ransom-Ryuk!A6DB1982F3C1
Malwarebytes	Ransom.Ryuk
Panda	Trj/CI.A
Rising	Ransom.Ryuk!8.10431 (CLOUD)
Ikarus	Trojan-Ransom.Ryuk
MaxSecure	Trojan.Malware.5247.susgen
Fortinet	W32/FRS.VSNTIU20!tr
AVG	Win32:Ryuk-A [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HgAASQwA

How to remove Graftor.849674?

Graftor.849674 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X