Fugrafa.12505 removal instruction

The Fugrafa.12505 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.12505 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• At least one IP Address, Domain, or File Name was found in a crypto call
• Performs HTTP requests potentially not found in PCAP.
• Enumerates running processes
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid

How to determine Fugrafa.12505?

File Info:
name: 082E0FE59FFCCDF9203A.mlw
path: /opt/CAPEv2/storage/binaries/973a36077f9bf18177ac6c90c6186a963e5b14f8eec7ae2a5d562983580079e4
crc32: B44DF40A
md5: 082e0fe59ffccdf9203a65865452d637
sha1: 24e3821376a43f3e7a247493221100d89f083eef
sha256: 973a36077f9bf18177ac6c90c6186a963e5b14f8eec7ae2a5d562983580079e4
sha512: 92a2eba733e7ca7a6d232727cb1fa332e69472c14ec09fcda8695d28d2c46aabfaaf03f2a966513ad440a18a0d7621c4c8caacab20b06ed7e94102f2d631d7c8
ssdeep: 196608:UXtQwmHORZ9nvp/61+Jp3wZTJqtNVeWPLqfUyvq:0mux961+JpYqvUq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A376CF21B941D031EDEA04B6D2FD5AFB5C388D15332AA0D3A6E5B494C9721E3773D38A
sha3_384: 9dfdc286feaca9332ec316994c0c54b238c3a281ed96b57f72337df571434251f998c63923ed62cd71c7f956a1440f03
ep_bytes: 83ec0cc70534c0ad0000000000e82e12
timestamp: 2017-08-07 15:35:29

Version Info:
0: [No Data]

Fugrafa.12505 also known as:

How to remove Fugrafa.12505?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.