How to remove "Graftor.912492"?

The Graftor.912492 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.912492 virus can do?

Creates RWX memory
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Generates some ICMP traffic
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

ad.qqfarmer.com.cn

bakad.qqfarmer.com.cn

images.qqfarmer.com.cn

down.qqfarmer.com.cn

ssl.ptlogin2.qq.com

appimg.qq.com

How to determine Graftor.912492?


File Info:
crc32: 47C18E6E
md5: f74e498ab1bb93c8341ab7768d850dbd
name: F74E498AB1BB93C8341AB7768D850DBD.mlw
sha1: 314adc50c366a571243595426586ac3caeec27ba
sha256: 45d6c5c0ccec77debf3c40f3dd428ab5cc28c22705e419da6552a21e58b52122
sha512: fbcb19226cf5fbfc9f26e8702ee47134fee8ed93a2bc14f278bcd1529da17499d9c2123b014ae79ee48a3e41f1a2b56aa10cccd270324512e485eeec3e52af55
ssdeep: 49152:5sTTw/ja3tdYB9ysAqMKfAiWYjU/5dtipcPnfsC8xLsaztHTRkwhq:8TNdYnzAqTfFHghd2ufsCuLsa5HFkaq
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: www.QQHelper.net
InternalName: QQx519cx7267x52a9x624b
FileVersion: 1.5.2.115
CompanyName: www.QQHelper.net
LegalTrademarks: www.QQHelper.net
ProductName: QQx519cx7267x52a9x624b
ProductVersion: 1.0.0.0
FileDescription: QQx519cx7267x52a9x624b
OriginalFilename: QQHelper.exe
Translation: 0x0804 0x03a8

Graftor.912492 also known as:

MicroWorld-eScan	Gen:Variant.Graftor.912492
FireEye	Generic.mg.f74e498ab1bb93c8
McAfee	Artemis!F74E498AB1BB
Cylance	Unsafe
AegisLab	Trojan.Win32.Graftor.4!c
Sangfor	Trojan.Win32.Wacatac.D4
BitDefender	Gen:Variant.Graftor.912492
Cybereason	malicious.ab1bb9
BitDefenderTheta	Gen:NN.ZelphiF.34590.9nKfaW9w9EgR
Cyren	W32/Trojan.FRVB-4340
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Alibaba	Trojan:Win32/Softcnapp.3f843101
Rising	Trojan.Woreflint!8.F5EA (CLOUD)
Ad-Aware	Gen:Variant.Graftor.912492
Emsisoft	Gen:Variant.Graftor.912492 (B)
DrWeb	Trojan.DownLoader36.36356
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
Ikarus	PUA.QQfarmer
Jiangmin	Trojan.Agentb.igh
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Graftor.DDEC6C
AhnLab-V3	Unwanted/Win32.HackTool.R119402
GData	Gen:Variant.Graftor.912492
VBA32	BScope.Trojan.Click
ALYac	Gen:Variant.Graftor.912492
Malwarebytes	Adware.QQHelper
TrendMicro-HouseCall	TROJ_GEN.R002H09B421
SentinelOne	Static AI – Suspicious PE
Fortinet	Riskware/Application
AVG	FileRepMalware
MaxSecure	Trojan.Malware.114371187.susgen

How to remove Graftor.912492?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Graftor.912492”?