Should I remove "Graftor.917449"?

The Graftor.917449 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.917449 virus can do?

Creates RWX memory
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.917449?


File Info:
crc32: B5E08736
md5: 2de7a6f796cac8843f902fd755ed1747
name: 2DE7A6F796CAC8843F902FD755ED1747.mlw
sha1: 92602076cab65137f3db1d2435b99b338b8a5cc6
sha256: 95d3f58717a8b825fe7ef7b464cbab9c1287b7909fe58f65233e476a286b81a6
sha512: 9f702aac10d44f111aa1ec8f99a7e93bcbe583e4e9d6903f2c1f5d02aaebd86b35da28138acbec9cd5372c190e58dcf19a98500b6860598c503c4cd8d02ab6ba
ssdeep: 12288:q57fjnmZa7DNaSLrl0bUFYY2HMiq6Ym8Adq7h7lsCJiYQoB5jD/SMZoSc+aqGN+4:q5vmZavNzLrl6USZ1W5jGM+tN+4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

Graftor.917449 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.917449
CAT-QuickHeal	Risktool.Flystudio.16886
ALYac	Gen:Variant.Graftor.917449
Cylance	Unsafe
Sangfor	Win.Malware.Zusy-6840460-0
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Gen:Variant.Graftor.917449
K7GW	Trojan ( 00013a151 )
BitDefenderTheta	Gen:NN.ZexaF.34590.!q0@aCow8Wib
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Malware.Zusy-6840460-0
Rising	Malware.Heuristic!ET#93% (RDMK:cmRtazquHjDcfUtAPZlAWrtf34iV)
Ad-Aware	Gen:Variant.Graftor.917449
Emsisoft	Gen:Variant.Graftor.917449 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.2de7a6f796cac884
Sophos	Generic PUA JC (PUA)
MAX	malware (ai score=84)
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Microsoft	TrojanDownloader:Win32/Emotet!ml
Arcabit	Trojan.Graftor.DDFFC9
GData	Win32.Application.PUPStudio.A
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!2DE7A6F796CA
Malwarebytes	PUP.Optional.ChinAd
Panda	Trj/Genetic.gen
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Agent.65CA!tr
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Dropper.Dinwod.frindll

How to remove Graftor.917449?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Graftor.917449”?