Graftor.931435 removal

The Graftor.931435 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.931435 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Graftor.931435?


File Info:
name: 04202C94417F30772916.mlw
path: /opt/CAPEv2/storage/binaries/4003f81e195f2b84c218582fa27b78aacee7535a6e12ce1644ca27001d6ea562
crc32: A8AD96B0
md5: 04202c94417f30772916854f1170e991
sha1: acee788eb1da40cd5530ca5001dc6808f98c1d25
sha256: 4003f81e195f2b84c218582fa27b78aacee7535a6e12ce1644ca27001d6ea562
sha512: a290775429741b3339374270a19b36ce31afdd38dff1304ebb0415aa34272a655e66af5c9ddb51c89da129c6972ac0377b100c7401572da0baf2040aadfa3a46
ssdeep: 6144:LhRsahruDYhVEAm7nSJI8P9NxIBUbWYs7UKAOqo2cXc9Hvj:LhRs/YRm+m8P/x2UcrUo69
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F4B49F11B981C032D1B316304E2AEA7599BCBD202976597B63E95D6BFE700C0B73A773
sha3_384: 5a3e48f5e602dcd0c526acb58fb05db5de9a21ac8a96e0054c5d8b9fb08fe1e79071b5b328ee296eb1a9922433faf1af
ep_bytes: 60be004044008dbe00d0fbffc787001d
timestamp: 2021-11-20 16:07:33

Version Info:
0: [No Data]

Graftor.931435 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Remcos.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.931435
FireEye	Generic.mg.04202c94417f3077
McAfee	Artemis!04202C94417F
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Backdoor:Win32/Remcos.303d88d8
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
BitDefenderTheta	Gen:NN.ZexaE.34182.EmW@ameRHWei
Cyren	W32/Trojan.QPMB-2425
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rescoms.N
Paloalto	generic.ml
ClamAV	Win.Trojan.Remcos-9841897-0
Kaspersky	Backdoor.Win32.Remcos.uby
BitDefender	Gen:Variant.Graftor.931435
Avast	FileRepMalware
Rising	Backdoor.Remcos!1.BAC7 (CLOUD)
Emsisoft	Gen:Variant.Graftor.931435 (B)
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Rescoms
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Patched.Ren.Gen
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	Backdoor.Win32.Remcos.uby
GData	Gen:Variant.Graftor.931435
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.RemcosRAT.R461318
ALYac	Gen:Variant.Graftor.931435
Malwarebytes	Malware.AI.327962661
APEX	Malicious
Tencent	Win32.Trojan.Graftor.Chc
MAX	malware (ai score=84)
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/PossibleThreat
AVG	FileRepMalware
Cybereason	malicious.4417f3
Panda	Trj/CI.A

How to remove Graftor.931435?

Graftor.931435 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X