Threat Description



Aliases: Trojan:W32/Graftor, Gen:variant.graftor.[variant]
Category: Malware
Type: Trojan
Platform: W32


A Generic Detection of a file that appears to have trojan-like features or behavior.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.


Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.

Technical Details

A detection name that uses the format "Gen:variant.graftor.[variant]" is a Generic Detection that identifies files with trojan-like characteristics or behavior.

Note (15 Dec 2011): False Positive onGen:variant.graftor.7220

The detectionGen:variant.graftor.7220 unintentionally triggered on a legitimate temporary file. A fix for this detection was released in the 2011-12-14_02 database update.

False positives sometimes occur in every antivirus product because of the complexity of present-day malware and file compression/protection utilities that are used on both malware and legitimate software.

If you believe a suspect file is legitimate, please forward a sample of the disputed file to our Labs for further analysis via:

Any additional information such as the origin of the file, scanning report file, and false positive detection name will help to resolve the issue more quickly.

About Generic Detections

Unlike more traditional detections (also known as signatures or single-file detections) a Generic Detection does not identify a unique or individual malicious program. Instead, a Generic Detection looks for broadly applicable code or behavior characteristics that indicate a file as potentially malicious, so that a single Generic Detection can efficiently identify dozens, or even hundreds of malware.

For more information about Generic Detections, see the Generic Detection description.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More