Should I remove “Fugrafa.1213”?

The Fugrafa.1213 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.1213 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fugrafa.1213?


File Info:
name: 20A14F3D0708EFE4EA86.mlw
path: /opt/CAPEv2/storage/binaries/e92c7299d229389e45f8d79fa944596acfa752541a296af3241f14f52c99e946
crc32: BD9F1F1E
md5: 20a14f3d0708efe4ea86f80d7b1a24ed
sha1: af8709c5e3cf5a7a87edcf5d4dcd188567d1870f
sha256: e92c7299d229389e45f8d79fa944596acfa752541a296af3241f14f52c99e946
sha512: eea15332ab1544afa5b288ba7e7ab6734e78054b247fbaadc40bfca5819c111580b70c206b72042c0a8d210391e11b347fefb696eb319d3ad0da5b0458557d45
ssdeep: 3072:T49YJAG9KrDpL3U8wbrj1f0bG24HJqC89tAABIA2eIac:WFV6brBDKt9+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ACC33A22F1C084B7D1621AFCDC1DA2AD593BFF243F29135A67E45D0E496AEC019396CB
sha3_384: e869327f12c98a4f0e3fab50317e343736404874521190d1e8fa1ccdde6e6bee87a195c69503066c7484bbfb33d713d5
ep_bytes: 558becb92b0000006a006a004975f951
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Fugrafa.1213 also known as:

DrWeb	Trojan.Siggen8.36290
MicroWorld-eScan	Gen:Variant.Fugrafa.1213
FireEye	Generic.mg.20a14f3d0708efe4
ALYac	Gen:Variant.Fugrafa.1213
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.790764
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.d0708e
Arcabit	Trojan.Fugrafa.D4BD
BitDefenderTheta	AI:Packer.32DBA46719
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Delf.UDD
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Fugrafa.1213
NANO-Antivirus	Trojan.Win32.Mlw.eybzts
Avast	Win32:Malware-gen
Rising	Trojan.Occamy!8.F1CD (TFE:4:KtbvLsid3XB)
Ad-Aware	Gen:Variant.Fugrafa.1213
Emsisoft	Gen:Variant.Fugrafa.1213 (B)
VIPRE	Gen:Variant.Fugrafa.1213
McAfee-GW-Edition	GenericR-LLK!20A14F3D0708
Trapmine	malicious.high.ml.score
Avira	HEUR/AGEN.1245130
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Generic.ASMalwS.F0
Microsoft	Program:Win32/Wacapew.C!ml
GData	Gen:Variant.Fugrafa.1213
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Agent.R252565
McAfee	GenericR-LLK!20A14F3D0708
VBA32	BScope.Backdoor.Pasur
Tencent	Malware.Win32.Gencirc.116ea1c9
Yandex	Trojan.GenAsa!3Ziyz5XmLN8
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Fugrafa.1213?

Fugrafa.1213 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X