Malware

How to remove “Fugrafa.12792”?

Malware Removal

The Fugrafa.12792 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.12792 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
csdw.jia-si.cn
downdcdn.jia-si.cn
www.jia-si.cn

How to determine Fugrafa.12792?


File Info:

crc32: 3A118D55
md5: bee7157bdfab04aa7d5e65ec201bb4fa
name: BEE7157BDFAB04AA7D5E65EC201BB4FA.mlw
sha1: 4916d02102df2d0241b5a9a9181c6a1d5b8b920f
sha256: 23b624717bd56593166a05a66c2db9e5ccb3bd56f32638326ccc18d1e0967190
sha512: 99da53138cdda9f61681bbbd72d28915fd1af27799edd8e488009be16ca0c9fa17861cae2c87d382becd8c391207b769323c16491a22f11a980385aeda29f65f
ssdeep: 49152:9u8Um5cHD8FMtP90p9Z/M1rsnoZUwFEUFA5E91WHQn:9FtVFMf0pX/Mx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Fugrafa.12792 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 00535f0d1 )
Elasticmalicious (high confidence)
DrWebAdware.Softcnapp.92
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.S3293683
ALYacGen:Variant.Fugrafa.12792
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWAdware ( 00535f0d1 )
Cybereasonmalicious.bdfab0
CyrenW32/S-2a1c663c!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Softcnapp.BC potentially unwanted
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Malware.Softcnapp-6787524-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fugrafa.12792
NANO-AntivirusTrojan.Win32.Softcnapp.fhpoep
MicroWorld-eScanGen:Variant.Fugrafa.12792
TencentTrojan.Win32.Generic.e
Ad-AwareGen:Variant.Fugrafa.12792
SophosSoftcnapp (PUA)
ComodoApplication.Win32.AdWare.Softcnapp.O@80ok4p
BitDefenderThetaGen:NN.ZexaF.34294.MAW@audcuXkj
McAfee-GW-EditionBehavesLike.Win32.Softcnapp.vh
FireEyeGeneric.mg.bee7157bdfab04aa
EmsisoftGen:Variant.Fugrafa.12792 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Adload.voc
AviraHEUR/AGEN.1142834
eGambitUnsafe.AI_Score_93%
Antiy-AVLTrojan/Generic.ASMalwS.27997C2
MicrosoftTrojan:Win32/Skeeyah.A!rfn
ArcabitTrojan.Fugrafa.D31F8
GDataGen:Variant.Fugrafa.12792
AhnLab-V3PUP/Win32.Helper.R233980
Acronissuspicious
McAfeeSoftcnapp
MAXmalware (ai score=100)
VBA32BScope.TrojanDownloader.Adload
MalwarebytesMalware.AI.4241390579
PandaTrj/Genetic.gen
RisingAdware.Downloader!1.BBEC (CLASSIC)
YandexTrojan.GenAsa!A3qOGRgU+/Q
IkarusPUA.Softcnapp
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/Softcnapp
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Fugrafa.12792?

Fugrafa.12792 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment