Should I remove “Fugrafa.158533 (B)”?

The Fugrafa.158533 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.158533 (B) virus can do?

Network activity detected but not expressed in API logs

How to determine Fugrafa.158533 (B)?


File Info:
crc32: F4450584
md5: c4d065146531d504133fd11926e0235f
name: C4D065146531D504133FD11926E0235F.mlw
sha1: b3e39ca6dce353afd4e6e5cc59bad4c92096a036
sha256: 2a81a47511bf5ed99f4fd2fc4a3bc4c8cc9d713179e62c2f42592435ad492b8e
sha512: 6b997f6de964e05f56fead992edf40321728b53d14ff1599e0e0d4430541c50e87b4394a34437e6c10778d2481b7fa80428c92296e4566870c8c5fbadd2c9d1a
ssdeep: 6144:2Exippi19jG2LGlVmsiaVQr1f62AOG7wW:2KippijG2qHmsJQjM7B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
IsPrivateBuild: False
ProductVersionRaw: 10.0.19041.546
InternalName: WmiPrvSE.exe
FilePrivatePart: 546
FileMajorPart: 10
FileMinorPart: 0
FileBuildPart: 19041
FileVersion: 10.0.19041.546 (WinBuild.160101.0800)
ProductVersion: 10.0.19041.546
FileDescription: WMI Provider Host
ProductPrivatePart: 546
ProductBuildPart: 19041
OriginalFilename: WmiPrvSE.exe
LegalCopyright: Microsoftxae Corporation. All rights reserved.
FileVersionRaw: 10.0.19041.546
ProductMajorPart: 10
ProductMinorPart: 0
CompanyName: Microsoftxae Corporation
ProductName: Microsoftxae Windowsxae Operating System
IsDebug: False
IsPatched: False
IsPreRelease: False
IsSpecialBuild: False
Translation: 0x0409 0x04b0

Fugrafa.158533 (B) also known as:

Lionic	Trojan.Win32.Fugrafa.4!c
ALYac	Gen:Variant.Fugrafa.158533
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ClipBanker.MU
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fugrafa.158533
MicroWorld-eScan	Gen:Variant.Fugrafa.158533
Ad-Aware	Gen:Variant.Fugrafa.158533
Sophos	Generic PUA LD (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34058.ou0@aa49Obfi
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Fugrafa.158533
Emsisoft	Gen:Variant.Fugrafa.158533 (B)
Avira	ADWARE/HPDefender.Gen7
eGambit	Unsafe.AI_Score_58%
Arcabit	Trojan.Fugrafa.D26B45
GData	Gen:Variant.Fugrafa.158533
AhnLab-V3	Trojan/Win.Generic.R434641
McAfee	Artemis!C4D065146531
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R002H09HB21
Rising	Trojan.Generic@ML.84 (RDML:pYIs/vqZthC73cvuDmDPjw)
Fortinet	Riskware/ClipBanker
AVG	Win32:PWSX-gen [Trj]
Qihoo-360	Win32/Adware.Generic.HgIASaIA

How to remove Fugrafa.158533 (B)?

Fugrafa.158533 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X