Graftor.864375 removal

The Graftor.864375 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.864375 virus can do?

A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Created a service that was not started

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.362com.com

How to determine Graftor.864375?


File Info:
crc32: E473AAE6
md5: 1fc1c860e86a8fbc2021d2567d62f703
name: 1FC1C860E86A8FBC2021D2567D62F703.mlw
sha1: 42ea2c9f4548614574dff36e019ae1cbc68b54e3
sha256: 76005ce2b7eb0c95f8dcc06b501244c73b17b3aff65e78c672c4a6ae56e67306
sha512: fb48f1837601a1bc7b2057d086414bc4a8478d3a3f17ea216e424d7d7509b825e35be8c7b6afb7ec91604058b2e4e230f8daba46fc04b30d3e0e1b473c20b67c
ssdeep: 24576:A5qezbM2Lh4oA3CMGGjXFQN/UTujRUsB57MSvpMnMW3+C/+QGJlsnUtZIi9u:Ak4ttS5vjXS3hZMipMnMW3+CaJynpi
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: TenCent QQ 2020
FileVersion: 1.0.0.0
CompanyName: TenCent
Comments: QQ2020
ProductName: QQ2020
ProductVersion: 1.0.0.0
FileDescription: QQ2020
Translation: 0x0804 0x04b0

Graftor.864375 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.864375
FireEye	Generic.mg.1fc1c860e86a8fbc
ALYac	Gen:Variant.Graftor.864375
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Adware ( 00506e8d1 )
BitDefender	Gen:Variant.Graftor.864375
K7GW	Adware ( 00506e8d1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.34688.znKfauXdkYmb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
AegisLab	Trojan.Win32.Generic.4!c
Ad-Aware	Gen:Variant.Graftor.864375
Emsisoft	Gen:Variant.Graftor.864375 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Sophos	BlackMoon Packed (PUA)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1139270
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Microsoft	Trojan:Win32/Wacatac.D7!ml
Gridinsoft	Trojan.Win32.Packed.oa
Arcabit	Trojan.Graftor.DD3077
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Graftor.864375
Cynet	Malicious (score: 100)
McAfee	Artemis!1FC1C860E86A
MAX	malware (ai score=89)
VBA32	BScope.Trojan.Wacatac
TrendMicro-HouseCall	TROJ_GEN.R06CH0CLD20
Rising	Trojan.Injector!1.A1C3 (CLASSIC)
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/GenKryptik.ESFJ!tr
AVG	FileRepMalware
Cybereason	malicious.f45486
Paloalto	generic.ml
Qihoo-360	Generic/HEUR/QVM11.1.AC27.Malware.Gen

How to remove Graftor.864375?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.