Should I remove “Fugrafa.2603”?

The Fugrafa.2603 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.2603 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fugrafa.2603?


File Info:
name: F9A011873C89671AD021.mlw
path: /opt/CAPEv2/storage/binaries/8b5c3ceee2291c890e5efc360622f5ec059f4eb19f9f39569b9789660427f69e
crc32: 5FE552D9
md5: f9a011873c89671ad02126ce93a72cda
sha1: 1551e388b980715e9a6757b65b8356b93bc5fb5b
sha256: 8b5c3ceee2291c890e5efc360622f5ec059f4eb19f9f39569b9789660427f69e
sha512: f11b7f1402553937b33ef2849e15128aac61fa6aff2229b2c0fac1cf3763e35b5ec9ae9f0cd4c105875ae2f5e633e455a4e8f2e92d5ebecf584709a238473ee7
ssdeep: 1536:AlvU9vSnvUiT8yErwqpN+D5V4G9o56SbEHCpWwpU6cWz0sKER7NulySZESodGc5:AlvWvoHTIrwqr+D5V4G9FayCswpU6Fz5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15F63E825FA0145BACCB305F097476FFE9A20891C0422C62EE754DC5AFFB79627A6D305
sha3_384: aaccfb69014f345fb2763109f7a9171ad9f9616013813bc11e34df6854a889bd4402f7a850fde71e4342d28c11a7a8c7
ep_bytes: 5589e583ec08c7042402000000ff158c
timestamp: 2014-02-27 06:14:01

Version Info:
0: [No Data]

Fugrafa.2603 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.2603
FireEye	Generic.mg.f9a011873c89671a
CAT-QuickHeal	Trojan.AgentPMF.S22454556
ALYac	Gen:Variant.Fugrafa.2603
Zillya	Trojan.Agent.Win32.461487
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004ee7aa1 )
K7GW	Trojan ( 004ee7aa1 )
Cybereason	malicious.73c896
Cyren	W32/S-e80efe08!Eldorado
Symantec	SMG.Heur!gen
ESET-NOD32	Win32/Mira.A
APEX	Malicious
ClamAV	Win.Malware.Mira-6717565-0
Kaspersky	Trojan.Win32.Agent.nezvfi
BitDefender	Gen:Variant.Fugrafa.2603
NANO-Antivirus	Trojan.Win32.Agent.cwujnu
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Variant.Fugrafa.2603
Emsisoft	Gen:Variant.Fugrafa.2603 (B)
Comodo	Worm.Win32.Mira.SG@72k617
DrWeb	Trojan.MulDrop5.38532
Sophos	ML/PE-A + W32/Mira-B
Ikarus	Trojan.Generic36.IQA
GData	Gen:Variant.Fugrafa.2603
Jiangmin	Trojan/Agent.ifmg
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASBOL.EBF
Microsoft	Worm:Win32/Mira!rfn
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXEP-DP!F9A011873C89
VBA32	Trojan.Agent
Malwarebytes	Malware.AI.1370145397
Rising	Worm.Win32.Mira.a (CLASSIC)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Mira.9C5!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Fugrafa.2603?

Fugrafa.2603 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X