Fugrafa.27903 removal guide

The Fugrafa.27903 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.27903 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Fugrafa.27903?


File Info:
name: 60DA7B6746400F50C2CC.mlw
path: /opt/CAPEv2/storage/binaries/8419c23db588a8a7916f67c20449cf98d9d2ec7e6664e98a56f97dc57cf581c8
crc32: 72C8F661
md5: 60da7b6746400f50c2cca5465dfce1e9
sha1: 38cb2a41baa0d09deddef23a2dfd9f3b063740a8
sha256: 8419c23db588a8a7916f67c20449cf98d9d2ec7e6664e98a56f97dc57cf581c8
sha512: 15c4c27e238514a1b91e8d4a81981fa8b5fa8dd2c07e583338c6f3569418259fedd77bd54d36df866bdcb9adaaf7f1ebaffd5a8f87bb32b8844c3c6629e9e878
ssdeep: 768:KUOEhSeqZwJg1e1GiCyd92Do3H8Pw/+3K:zOklqZEg15i1qf5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C1538D03F6E1C232C150D8FDAE0BE518A77B36603E5565C2BEF61F8F9E1A541492C19E
sha3_384: ed7eb988f469ec608eab26e05cdab044cd62dadfe0efc4f38275aa6266a93210789af772d92d454b934f2b12d62d6190
ep_bytes: 55545d83c4f053b8346f4000e85fd4ff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Fugrafa.27903 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Fugrafa.27903
ClamAV	Win.Worm.Fearso-7358009-0
FireEye	Generic.mg.60da7b6746400f50
McAfee	Artemis!60DA7B674640
Zillya	Worm.Eggnog.Win32.45121
Sangfor	Worm.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.746400
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
Baidu	Win32.Worm.Eggnog.a
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fugrafa.27903
NANO-Antivirus	Trojan.Win32.Delphi.iarwcx
Tencent	Worm.Win32.Eggnog.a
Ad-Aware	Gen:Variant.Fugrafa.27903
Sophos	Troj/Agent-AJFK
DrWeb	Win32.HLLW.Google.24577
VIPRE	Gen:Variant.Fugrafa.27903
McAfee-GW-Edition	BehavesLike.Win32.Picsys.kz
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Fugrafa.27903 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Cospet.gv
Antiy-AVL	Trojan/Generic.ASMalwS.7B8
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Win32.Worm.Fearso.A
Google	Detected
ALYac	Gen:Variant.Fugrafa.27903
MAX	malware (ai score=81)
Malwarebytes	Generic.Trojan.Malicious.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH09HI22
Rising	Worm.Win32.Eggnog.b (CLASSIC)
Ikarus	Email-Worm.Win32.Fearso
MaxSecure	Trojan.Malware.121218.susgen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Fugrafa.27903?

Fugrafa.27903 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X