Graftor.Elzob.12855 removal tips

The Graftor.Elzob.12855 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.Elzob.12855 virus can do?

Executable code extraction
Creates RWX memory
Sniffs keystrokes
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Graftor.Elzob.12855?


File Info:
crc32: 8D87B10A
md5: 4bacbf37b14e5473a72a92503e4d8cde
name: 4BACBF37B14E5473A72A92503E4D8CDE.mlw
sha1: 0d73a91a8f32f2223c8e5d38751f67900875b84c
sha256: 7f920fd0203191b25179d5492284640f04c7dcfa3d50b95bab396580f9c40bcd
sha512: de1162a7f8a5634a0b37e04df1c1293988b122b05212e530d121c3366be7ac3f194eee78f6dac271bd472aaa41129460b7ee3f11f9b044b7e1687bb95ba8bfa0
ssdeep: 1536:z8GDtkDiu/IX84We7RV9bOrWHhBpNvI5SF:zxaDiuwX84We7RDnBrvQSF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: DataDLL
FileVersion: 12.43.0054
CompanyName: SunCorporation Inc.
Comments: Cj6OFyg
ProductName: Java(TM)UpdateStart
ProductVersion: 12.43.0054
FileDescription: Windows Hizmetleri Ana Bilgisayar x130x15flemi
OriginalFilename: DataDLL.exe

Graftor.Elzob.12855 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Spyware ( 0055e3db1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen3.5900
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Graftor.Elzob.12855
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.34256
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Ransom:Win32/Blocker.f16fdb82
K7GW	Spyware ( 0055e3db1 )
Cybereason	malicious.7b14e5
ESET-NOD32	a variant of Win32/Spy.VB.NGZ
APEX	Malicious
TotalDefense	Win32/Miser.I
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.LokiBot-7601662-0
Kaspersky	Trojan-Ransom.Win32.Blocker.blhy
BitDefender	Gen:Variant.Graftor.Elzob.12855
NANO-Antivirus	Trojan.Win32.Miser.covkkp
MicroWorld-eScan	Gen:Variant.Graftor.Elzob.12855
Tencent	Malware.Win32.Gencirc.10bfa961
Ad-Aware	Gen:Variant.Graftor.Elzob.12855
Sophos	ML/PE-A + Mal/VB-TS
Comodo	TrojWare.Win32.Miser.B@36gnb2
BitDefenderTheta	Gen:NN.ZevbaF.34628.fm1@a8H65Uei
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Swisyn.mt
FireEye	Generic.mg.4bacbf37b14e5473
Emsisoft	Gen:Variant.Graftor.Elzob.12855 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Swisyn.lfj
Avira	TR/Dropper.Gen
eGambit	Generic.Malware
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Miser.A
Arcabit	Trojan.Graftor.Elzob.D3237
AegisLab	Trojan.Win32.Blocker.j!c
ZoneAlarm	Trojan-Ransom.Win32.Blocker.blhy
GData	Gen:Variant.Graftor.Elzob.12855
AhnLab-V3	Worm/Win32.VBNA.R13846
McAfee	GenericRXHK-AJ!4BACBF37B14E
MAX	malware (ai score=100)
VBA32	Trojan.VBRA.01834
Malwarebytes	Trojan.KeyLogger
Panda	Trj/CI.A
TrendMicro-HouseCall	HV_MISER_CA234792.TOMC
Rising	Trojan.Miser!1.6766 (CLASSIC)
Yandex	Trojan.GenAsa!kdLqi7Pf9Y8
Ikarus	Trojan.Win32.Miser
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/KeyLogger.VBY!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Ransom.Blocker.HgIASOkA

How to remove Graftor.Elzob.12855?

Graftor.Elzob.12855 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X