Fugrafa.156802 removal instruction

The Fugrafa.156802 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.156802 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Fugrafa.156802?


File Info:
crc32: E0E7EEFD
md5: bf814947b459a2987d3d528be80c1d24
name: BF814947B459A2987D3D528BE80C1D24.mlw
sha1: 5dce84484cbcaccc0826311163f712d953d4aceb
sha256: 5b8dc2479a2923621d9d7ed6f1f2cf6196f54d235ce1cbaba703b63c1b2c1a7c
sha512: 089f4513d2b3088d8c84a2a16ea63f04c27229b1ab991f018adfec7f331a39945a7677bd426cb9d61056302abef4e3ee605577b7379bbac23bc3490b7fa6cdf9
ssdeep: 6144:1LxYwRn4WWT6poI+h76YPRZXpgAiB6CVy97o2iRNXVbUVUmwVgrWkJrMuXya:FCj6pLm7TPvaUCVy982SVVmUmwy7ea
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) 360.cn Inc. All Rights Reserved.
InternalName: 360leakfixer.exe
FileVersion: 2, 1, 0, 1018
CompanyName: 360.cn
Comments: http://www.360.cn
ProductName: 360x5b89x5168x885bx58eb
ProductVersion: 2, 1, 0, 1018
FileDescription: 360x5b89x5168x885bx58eb x6f0fx6d1ex88dcx4e01x6aa2x6e2cx6a21x7d44
OriginalFilename: 360leakfixer.exe
Translation: 0x0404 0x04b0

Fugrafa.156802 also known as:

K7AntiVirus	Password-Stealer ( 0055e3dc1 )
Lionic	Trojan.Win32.Delf.4!c
DrWeb	Trojan.PWS.Qqpass.10688
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Fugrafa.156802
Cylance	Unsafe
Sangfor	Trojan.Win32.Kazy.312438
Alibaba	TrojanPSW:Win32/QQPass.ac8ad632
K7GW	Password-Stealer ( 0055e3dc1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.QQPass.NRJ
APEX	Malicious
Avast	Win32:Agent-AWGD [Trj]
Kaspersky	Trojan.Win32.Delf.dkex
BitDefender	Gen:Variant.Fugrafa.156802
NANO-Antivirus	Trojan.Win32.Delf.cwawwb
MicroWorld-eScan	Gen:Variant.Fugrafa.156802
Tencent	Win32.Trojan.Delf.Pjdh
Ad-Aware	Gen:Variant.Fugrafa.156802
Comodo	Malware@#2o5zmktdh66cy
BitDefenderTheta	Gen:NN.ZexaF.34170.GC0@aCoAYHkj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.bf814947b459a298
Emsisoft	Gen:Variant.Fugrafa.156802 (B)
Avira	TR/Kazy.312438.2
Kingsoft	Win32.Troj.Agent.cg.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Fugrafa.D26482
GData	Gen:Variant.Fugrafa.156802
AhnLab-V3	Trojan/Win32.QQPass.R102949
McAfee	Artemis!BF814947B459
MAX	malware (ai score=84)
VBA32	Trojan.Delf
Panda	Trj/CI.A
Yandex	Trojan.Delf!m7GYbqdTVCA
Ikarus	Trojan-Dropper.Delf
Fortinet	W32/Delf.DKEX!tr
AVG	Win32:Agent-AWGD [Trj]
Paloalto	generic.ml

How to remove Fugrafa.156802?

Fugrafa.156802 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X