Malware

Fugrafa.163019 removal

Malware Removal

The Fugrafa.163019 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.163019 virus can do?

  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Fugrafa.163019?


File Info:

name: B96630071E212B59A248.mlw
path: /opt/CAPEv2/storage/binaries/8be05b45e65c229174863d5131d0a7f21fcff4a496c6ce791ba46d6fa906f8db
crc32: 5A50D17D
md5: b96630071e212b59a2483f0a4d10508a
sha1: 77745ca5cf7d462f62b2cbbf222165508e263011
sha256: 8be05b45e65c229174863d5131d0a7f21fcff4a496c6ce791ba46d6fa906f8db
sha512: 356e2dfd141936c44f44599178f3163d23252a18691e8bf577961c18021b1f732bbe597d4593dffa02dbb66117446beca20186183eecebe002a7581b3485cff6
ssdeep: 12288:d3hwRn7G1z7Hl+IYuPxOIB3190Df26Q8JA:dxWS1VoudB3190Df2T8JA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T167B4AF33F2E19537C1376A7CCD6F5768A82A7E202D6824862FE51D4C9F387C1352A297
sha3_384: 15b06f76029001b027423daeece4d713be034ae91730857e67f16efa4a7c63c4005c7e16cb7fd0a6c3efb723cb1c56ef
ep_bytes: 558bec83c4e433c08945e48945ec8945
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Fugrafa.163019 also known as:

BkavW32.AIDetect.malware2
LionicAdware.Win32.DealPly.2!c
DrWebAdware.DealPly.479
MicroWorld-eScanGen:Variant.Fugrafa.163019
FireEyeGeneric.mg.b96630071e212b59
CAT-QuickHealAdWare.DealPly.OD8
McAfeeArtemis!B96630071E21
ZillyaAdware.DealPly.Win32.466440
SangforAdware.Win32.DealPly.ewmnl
K7AntiVirusAdware ( 004d9c1d1 )
AlibabaAdWare:Win32/DealPly.bfe89658
ArcabitTrojan.Fugrafa.D27CCB
CyrenW32/DealPly.H.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.CM potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R067C0WIH21
Paloaltogeneric.ml
Kasperskynot-a-virus:AdWare.Win32.DealPly.ewmnl
BitDefenderGen:Variant.Fugrafa.163019
SUPERAntiSpywarePUP.DealPly/Variant
AvastWin32:Adware-gen [Adw]
TencentWin32.Adware.Dealply.Pgcs
Ad-AwareGen:Variant.Fugrafa.163019
SophosGeneric PUA HH (PUA)
TrendMicroTROJ_GEN.R067C0WIH21
McAfee-GW-EditionBehavesLike.Win32.AdwareDealPly.gh
EmsisoftGen:Variant.Fugrafa.163019 (B)
SentinelOneStatic AI – Malicious PE
WebrootPua.Adware.Gen
AviraHEUR/AGEN.1126527
MAXmalware (ai score=87)
Antiy-AVLTrojan/Generic.ASMalwS.15E2CF1
MicrosoftTrojan:Win32/Wacatac.B!ml
ViRobotAdware.Dealply.504320.AHZ
GDataGen:Variant.Fugrafa.163019
CynetMalicious (score: 100)
VBA32Adware.DealPly
CylanceUnsafe
APEXMalicious
RisingTrojan.Generic@ML.100 (RDML:zZaRA764AB8+kK0wf6dZyg)
IkarusAdWare.DealPly
FortinetAdware/DealPly
AVGWin32:Adware-gen [Adw]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Fugrafa.163019?

Fugrafa.163019 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment