Categories: Malware

Graftor.928118 removal guide

The Graftor.928118 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.928118 virus can do?

Executable code extraction
Creates RWX memory
Performs some HTTP requests
Unconventionial language used in binary resources: Hungarian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Graftor.928118?


File Info:
crc32: 2DD7EA66md5: 2c3b4c255d8d786535c4832f5b7f7c0ename: 2C3B4C255D8D786535C4832F5B7F7C0E.mlwsha1: 3cc1d799b6f92a338cffa35d74d52b1c4f19a91esha256: 46c474c38fd679025142a453fc46243a91e0820d4ab0449aab0bd92c29d0ee30sha512: 847d322ab76b98b24cc12c0591b2e4a8cf78afe8411e18aefc10eb1bc9824eb6251000a043403fc4ff6cebef523fbe3fd09554a2f442f1eea28ee25329a064e3ssdeep: 768:AZI4oR9Y0oIF+ik9FQGDMcZ7/R9hxIB6oRiU:lZR9FoIFo9FQgD1iVltype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x040e 0x04b0LegalCopyright: Copyright (C) ACInternalName: dosissspiroFileVersion: 1.00CompanyName: ACLegalTrademarks: Copyright (C) ACComments: ACProductName: ACProductVersion: 1.00FileDescription: ACOriginalFilename: dosissspiro.exe

Graftor.928118 also known as:

Bkav	W32.AIDetectGBM.malware.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.79469
FireEye	Generic.mg.2c3b4c255d8d7865
ALYac	Gen:Variant.Graftor.928118
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/VBObfuse.fecb3ce0
Cyren	W32/Kryptik.DCA.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Midie.79469
Paloalto	generic.ml
Ad-Aware	Gen:Variant.Midie.79469
Emsisoft	Gen:Variant.Midie.79469 (B)
GData	Gen:Variant.Midie.79469
Arcabit	Trojan.Midie.D1366D
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/VBObfuse.RA!MTB
Cynet	Malicious (score: 90)
McAfee	PWS-FCWF!2C3B4C255D8D
MAX	malware (ai score=84)
Malwarebytes	Trojan.MalPack.VB
ESET-NOD32	a variant of Win32/Kryptik.HJPE
Rising	Downloader.Guloader!1.D2F0 (CLASSIC)
Ikarus	Trojan.VB.Crypt
Fortinet	W32/Kryptik.HJPE!tr
BitDefenderTheta	Gen:NN.ZevbaCO.34590.dm0@aKwws9jG
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_70% (D)