Categories: Malware

Fugrafa.25918 removal tips

The Fugrafa.25918 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.25918 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fugrafa.25918?


File Info:
name: 04EEC2F526739304962C.mlwpath: /opt/CAPEv2/storage/binaries/69ef3dd629fad8d49970538338de1a854a3f6d035329e2145dca2a5dfe865fe2crc32: 592CA1A3md5: 04eec2f526739304962cfc2a9a9c063asha1: 97a8a3baa3c540d4cf72f62c83785dcda0cf05acsha256: 69ef3dd629fad8d49970538338de1a854a3f6d035329e2145dca2a5dfe865fe2sha512: 9f1e1511c58ded40945413a7ad2e19ebdee3e3290a35a0725dcaa801c55dc17ed3f006c555cf5b237fa35b0d7f4eb47081162441ddd67de4e8e967d1cf9a19d7ssdeep: 6144:rSccP4hnBeC1tXEF41fGHsvk2Qu6LNenDiMNEw:eFPcbt84MMMQ1bNEwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD44CF11A7D586B3E17A1B7044F6A14F073E7C85C8349A1CDB442CADDE73940AABB39Bsha3_384: b08f22134c3845737073ba963201ee90c4e594b6d7e4e150715a97a98948104bfe35ead221b21d66a1a98038c5e668c2ep_bytes: 5589e583ec08c7042401000000ff1530timestamp: 2010-08-18 04:40:28
Version Info:
CompanyName: Microsoft CorporationFileDescription: Auto-extracteur de fichier CAB Win32FileVersion: 6.00.2900.5512 (xpsp.080413-2105)InternalName: Wextract                LegalCopyright: © Microsoft Corporation. Tous droits réservés.OriginalFilename: WEXTRACT.EXE            ProductName: Système d'exploitation Microsoft® Windows®ProductVersion: 6.00.2900.5512Translation: 0x040c 0x04b0

Fugrafa.25918 also known as:

Lionic	Trojan.Win32.Bifrose.liu3
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen3.36643
MicroWorld-eScan	Gen:Variant.Fugrafa.25918
FireEye	Generic.mg.04eec2f526739304
CAT-QuickHeal	Backdoor.Bifrose.AE
McAfee	Artemis!04EEC2F52673
Malwarebytes	Malware.AI.3164049612
Zillya	Backdoor.Bifrose.Win32.98334
Sangfor	Trojan.Win32.MoleboxVS.A
K7AntiVirus	Trojan ( 0055e3f01 )
Alibaba	Packed:Win32/MoleboxVS.190110
K7GW	Trojan ( 0055e3f01 )
Cybereason	malicious.526739
VirIT	Trojan.Win32.Generic.UO
Cyren	W32/Bifrost.R.gen!Eldorado
Symantec	Trojan.Gen
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.MoleboxVS.A suspicious
TrendMicro-HouseCall	BKDR_BIFROSE.SMA
ClamAV	Win.Trojan.Bifrose-17361
Kaspersky	Backdoor.Win32.Bifrose.fxv
BitDefender	Gen:Variant.Fugrafa.25918
NANO-Antivirus	Trojan.Win32.TrjGen.cxdjgf
Tencent	Trojan.Win32.Refroso.dejg
Ad-Aware	Gen:Variant.Fugrafa.25918
Emsisoft	Gen:Variant.Fugrafa.25918 (B)
Comodo	TrojWare.Win32.Agent.~JH4@1ohy0k
VIPRE	Gen:Variant.Fugrafa.25918
McAfee-GW-Edition	BehavesLike.Win32.HLLP.dc
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-R
Ikarus	Trojan.Win32.Llac
Jiangmin	Trojan/Llac.amy
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.64
Kingsoft	Win32.Hack.Bifrose.f.(kcloud)
Microsoft	Trojan:Win32/Occamy.C69
GData	Gen:Variant.Fugrafa.25918
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Bifrose.R20774
VBA32	Trojan.Llac
ALYac	Gen:Variant.Fugrafa.25918
APEX	Malicious
Rising	Backdoor.Bifrose!8.B24 (CLOUD)
Yandex	Trojan.GenAsa!uHCJoU+eC5M
SentinelOne	Static AI – Malicious SFX
MaxSecure	Trojan.Malware.2076025.susgen
Fortinet	W32/Bifrose.ZXE!tr
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)