Malware

About “Fugrafa.26754” infection

Malware Removal

The Fugrafa.26754 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.26754 virus can do?

  • Unconventionial language used in binary resources: Russian
  • Sniffs keystrokes
  • Exhibits behavior characteristic of Kibex Spyware/KeyBase Keylogger
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Fugrafa.26754?


File Info:

crc32: E5201645
md5: d8aadb852e9f72e3dfdf9cb21c69bb52
name: D8AADB852E9F72E3DFDF9CB21C69BB52.mlw
sha1: debc4316f67b3f050c79b8055a78dcd0306666cb
sha256: f6897cac95b3170435a137bb808fef3c9b20fd5e47a967f7e4d04086b5020e60
sha512: 52687748163f439a0114280705be23d95c473c8350ee9ce5734612c90b13c28c8382905f27eadfd246acaf4ce67c20bca39a19952e2f973f1f768fa65c8c7068
ssdeep: 1536:ZfMqFyiQdhshUjBl67ea9daDF1ztJba0ebbS:VnAoyM7eTLba3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Fugrafa.26754 also known as:

K7AntiVirusTrojan ( 7000000f1 )
LionicTrojan.Win32.PornoBlocker.j!c
DrWebTrojan.Fakealert.9188
CynetMalicious (score: 100)
ALYacGen:Variant.Fugrafa.26754
CylanceUnsafe
ZillyaTrojan.FakeAV.Win32.1203
AlibabaTrojan:Win32/LockScreen.f54e3c62
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.52e9f7
CyrenW32/Risk.FBIR-2532
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/LockScreen.ER
APEXMalicious
AvastWin32:Trojan-gen
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Fugrafa.26754
NANO-AntivirusTrojan.Win32.PornoBlocker.blzyj
MicroWorld-eScanGen:Variant.Fugrafa.26754
TencentWin32.Trojan.Lockscreen.Wtdq
Ad-AwareGen:Variant.Fugrafa.26754
SophosML/PE-A + Troj/Vilsel-Gen
ComodoSuspicious@#3s9msfdujjimd
BitDefenderThetaGen:NN.ZelphiF.34170.dGW@aem5mSoc
VIPRETrojan.Win32.Generic.pak!cobra
TrendMicroTROJ_RANSOM.SMF
McAfee-GW-EditionBehavesLike.Win32.Wabot.qh
FireEyeGeneric.mg.d8aadb852e9f72e3
EmsisoftGen:Variant.Fugrafa.26754 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/PornoBlocker.ac
WebrootW32.Malware.Downloader
AviraHEUR/AGEN.1122995
Antiy-AVLTrojan/Generic.ASMalwS.106B85
GDataGen:Variant.Fugrafa.26754
TACHYONTrojan/W32.DP-PornoBlocker.59904
AhnLab-V3Trojan/Win32.PornoBlocker.C57570
McAfeeArtemis!D8AADB852E9F
MAXmalware (ai score=100)
VBA32Trojan.Boot.Heur
MalwarebytesMalware.AI.3924704969
PandaTrj/SMSLock.D
TrendMicro-HouseCallTROJ_RANSOM.SMF
RisingTrojan.Generic@ML.81 (RDML:aD2Uu5zrXEv5iquKrJXBEQ)
YandexTrojan.GenAsa!1biaszSFF2k
IkarusTrojan-Ransom.PornoBrick
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/PornoBlocker.DO!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Fugrafa.26754?

Fugrafa.26754 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment