Graftor.981092 (file analysis)

The Graftor.981092 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.981092 virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Graftor.981092?


File Info:
crc32: 667D411B
md5: d49d64ff4d43d1184fd43c0973d4e608
name: D49D64FF4D43D1184FD43C0973D4E608.mlw
sha1: df9fc8aafddd23db50b1878dce00dc4061d3df88
sha256: 1e10ee2b5abb17f6be2b45727ac39adcc2cd9943cb69448cf1e6fe95b42e30a7
sha512: 1bf16106a1aef2e66fbf3f537b9d52306467e9e4c7c49fe0487b3d7e384a3cabae56d36a92cef7d6b505b2afbdd086825290e3a50f521bfcd97a43cd2840b35f
ssdeep: 49152:ON699OAK0iP++kfLh3Vfh9gZlQl/4HsjXHRriPqEKr9vsC7AjRCPpxte:S699S0p9fl3VilGyqESH7+Yxze
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Graftor.981092 also known as:

K7AntiVirus	Adware ( 00536c641 )
Lionic	Adware.Win32.Agent.2!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.262173
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Adware ( 00536c641 )
Cybereason	malicious.f4d43d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:AdWare.Win32.Agent.xxdwba
BitDefender	Gen:Variant.Graftor.981092
NANO-Antivirus	Riskware.Win32.AD.fgthlf
MicroWorld-eScan	Gen:Variant.Graftor.981092
Tencent	Win32.Adware.Agent.Wrgn
Sophos	Generic ML PUA (PUA)
Comodo	ApplicUnwnt@#1ascr5rjfx1qw
FireEye	Generic.mg.d49d64ff4d43d118
Emsisoft	Gen:Variant.Graftor.981092 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_94%
Microsoft	Trojan:Win32/Azorult!ml
Arcabit	Trojan.Graftor.DEF864
GData	Gen:Variant.Ursu.262173
MAX	malware (ai score=94)
VBA32	Adware.Agent
Malwarebytes	Adware.Wajam
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.80 (RDML:eGzBcFXrTw34o33ZtmLxeg)
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Graftor.981092?

Graftor.981092 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X