Categories: Malware

Graftor.91584 removal instruction

The Graftor.91584 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.91584 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Behavioural detection: Transacted Hollowing
Collects information to fingerprint the system

How to determine Graftor.91584?


File Info:
name: 91741D947C455C9B6D0F.mlwpath: /opt/CAPEv2/storage/binaries/4e97a70c222c2fda3719ac97786acc2f33cd93bd76ecca25b5a5d439bb43f457crc32: C4482B60md5: 91741d947c455c9b6d0f845a63708176sha1: e17a8c1115217d4ebd465847848b0702e2f7abe2sha256: 4e97a70c222c2fda3719ac97786acc2f33cd93bd76ecca25b5a5d439bb43f457sha512: 27d26445da9e8f22d7d547aa10d4c131cab32d60d6ae90255842660b9524082d41c06c0e9c7a48771bc91d2500417e69f2c992ba0e2108057d9b08c841bc9c2essdeep: 3072:AGMohJ718OEiNBP718rBrBQyizKgtFJlsmiA:LhJ58OdV7CFiyiWC6miAtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T135E3D0BD80D5253DF094DCFBAC618A674C6F64537B507A106FB7CB8806BA0E52B2A1C7sha3_384: 525784e2e5cc20384e1b349c89cb10fbefb6d941fb59758afab069eeb8366e09cffc9ae43db1ea69d60470d3719a5e68ep_bytes: 5589e581ecd0000000565731ff897de8timestamp: 2013-04-20 07:29:31
Version Info:
0: [No Data]

Graftor.91584 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lJh9
tehtris	Generic.Malware
DrWeb	Trojan.Redirect.140
MicroWorld-eScan	Gen:Variant.Graftor.91584
FireEye	Generic.mg.91741d947c455c9b
Skyhigh	BehavesLike.Win32.Dropper.ch
McAfee	Dropper-FEQ!91741D947C45
Malwarebytes	Crypt.Trojan.Malicious.DDS
Zillya	Trojan.Agentb.Win32.885
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Malware:Win32/km_243f6.None
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Graftor.D165C0
BitDefenderTheta	Gen:NN.ZexaF.36792.jqX@aKFV5tn
VirIT	Trojan.Win32.Agent4.ANMH
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.BBEX
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Razy-6943334-0
Kaspersky	Trojan.Win32.Agentb.khd
BitDefender	Gen:Variant.Graftor.91584
NANO-Antivirus	Trojan.Win32.Agent.bxpifm
Avast	Win32:Dropper-gen [Drp]
Tencent	Malware.Win32.Gencirc.10b1adb3
TACHYON	Trojan/W32.Agent.147568.D
Emsisoft	Gen:Variant.Graftor.91584 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen7
Baidu	Win32.Trojan.Kryptik.eg
VIPRE	Gen:Variant.Graftor.91584
TrendMicro	TROJ_SPNR.35FE13
Trapmine	malicious.high.ml.score
Sophos	Troj/Gyepis-B
Ikarus	Trojan.Win32.Crypt
Jiangmin	Trojan/Agentb.wc
Webroot	W32.Malware.Gen
Varist	W32/Flo.A.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Win32.Kryptik.bbex
Kingsoft	malware.kb.a.1000
Xcitium	TrojWare.Win32.Kryptik.ADFA@4xf7un
Microsoft	Trojan:Win32/Gepys.A!MTB
ZoneAlarm	Trojan.Win32.Agentb.khd
GData	Gen:Variant.Graftor.91584
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R65034
Acronis	suspicious
VBA32	SScope.Malware-Cryptor.Carberp.2313
ALYac	Gen:Variant.Graftor.91584
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_SPNR.35FE13
Rising	Dropper.Gepys!8.15D (TFE:1:o2ee6pq0MBK)
Yandex	Trojan.Agentb!c/mPbkBR+Fc
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.AZHQ!tr
AVG	Win32:Dropper-gen [Drp]
Cybereason	malicious.115217
DeepInstinct	MALICIOUS