Categories: Malware

About “Graftor.972969” infection

The Graftor.972969 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Graftor.972969 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Graftor.972969?


File Info:
name: 5CFBECEA70D8C2AAB426.mlwpath: /opt/CAPEv2/storage/binaries/4308ec785212211f4cf9b1afe3a9b3e990f41a9eb79b663b8ba5999f9e9d9164crc32: A725945Cmd5: 5cfbecea70d8c2aab42646fb21d5458asha1: 131d660df7adffd90e3f3b219eb6d1abe23a47e5sha256: 4308ec785212211f4cf9b1afe3a9b3e990f41a9eb79b663b8ba5999f9e9d9164sha512: d2fc339388809f3833d1631516fb27cddc539c4655a5063a9a335e1caeabdf8035568221c5554ce6e8288bbdc1459468b0f65c382913f374b6c118f76adf8054ssdeep: 3072:9sCV7nE+qR31pVozXtTNUPu+ySPf4I84ASXN41OAg0FubBe/hTgE1BWmqh40MLd6:9zbWozXtTeWGIN4TAOaVjHAaLOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B2445C1076E29831F1B36C364DFCAA9A853DF92107165AEF63D8061E5EB45C1BA30B37sha3_384: d0853fe16111de456f2711044e4d06c15d6583d9c37cf10a42ab4bc4036778d398703c0090413c7415772aec3bd62f6fep_bytes: e89e060000e98efeffffff2548c14100timestamp: 2018-02-02 11:47:49
Version Info:
FileDescription: OEXHAJILZOriginalFilename: yotaix.exeInternalName: yotaixCompanyName: IPAOQC EEXGAUQWYOTranslation: 0x0409 0x04b0

Graftor.972969 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.Generic.2!c
Elastic	malicious (high confidence)
DrWeb	Trojan.StartPage1.49548
MicroWorld-eScan	Gen:Variant.Graftor.972969
FireEye	Generic.mg.5cfbecea70d8c2aa
McAfee	PUP-XER-IL
Cylance	Unsafe
Zillya	Adware.Hpdefender.Win32.6
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	AdWare:Win32/HPDefender.1fbc8bc6
K7GW	Adware ( 00525cb11 )
K7AntiVirus	Adware ( 00525cb11 )
Arcabit	Trojan.Graftor.DED8A9
BitDefenderTheta	Gen:NN.ZexaF.34084.qC0@aOCaBDgi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.HPDefender.DBG
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Gen:Variant.Graftor.972969
NANO-Antivirus	Riskware.Win32.Hpdefender.expkfe
Avast	Win32:Adware-gen [Adw]
Tencent	Win32.Adware.Generic.Tazj
Ad-Aware	Gen:Variant.Graftor.972969
Sophos	Generic PUA BD (PUA)
Comodo	ApplicUnwnt@#susil5q49qwk
VIPRE	Adware.Win32.Hpdefender
McAfee-GW-Edition	PUP-XER-IL
Emsisoft	Gen:Variant.Graftor.972969 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	AdWare.Hpdefender.atx
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1103386
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.BTSGeneric
Kingsoft	Win32.Troj.Generic.ta.(kcloud)
Gridinsoft	Ransom.Win32.Occamy.sa
Microsoft	Trojan:Win32/Occamy.C43
ViRobot	Adware.Hpdefender.274432
GData	Gen:Variant.Graftor.972969
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.972969
VBA32	Adware.Hpdefender
Malwarebytes	Malware.AI.2658728153
APEX	Malicious
Rising	Trojan.Generic@ML.100 (RDML:LWlvjvm/FsQo5YZWP3jbNg)
Yandex	PUA.Hpdefender!P7TT6MtDbLU
Ikarus	PUA.HPDefender
Fortinet	Riskware/HPDefender
AVG	Win32:Adware-gen [Adw]
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen