About "Fugrafa.28098 (B)" infection

The Fugrafa.28098 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.28098 (B) virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Fugrafa.28098 (B)?


File Info:
crc32: 8B161B07
md5: c80af025822540000e639b59c50005d7
name: C80AF025822540000E639B59C50005D7.mlw
sha1: d2c864f3a05af3b098e1c345b83e3ef5372ebaa6
sha256: f5ece3db5cc49883dc7a2c5c41ee991fdceb564f4ed8aeb2363bb060d9c791c3
sha512: c2675307c433245984bf60912a3d9ad92fe9c6c3af2d48790e332a0421e263125a41afa61258ce9c96cddab090de0919d6089cdf9aeb1eee9da9c4b3ac07ab4f
ssdeep: 192:4mdHjClfSWngwc5YAfjy6HY41edKz7JJicZqovkddW99bWFrCFX6:4mdGtSZ5YAfZHxkdOmcOW99bWF8X
type: PE32 executable (GUI) Intel 80386 system file, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: svchost.exe
FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.14393.0
FileDescription: Host Process for Windows Services
OriginalFilename: svchost.exe
Translation: 0x0409 0x04b0

Fugrafa.28098 (B) also known as:

K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader21.53580
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Fugrafa.28098
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.683982
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.582254
Symantec	SMG.Heur!gen
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.CQX
Avast	Win32:Malware-gen
Kaspersky	Backdoor.Win32.Farfli.ajly
BitDefender	Gen:Variant.Fugrafa.28098
NANO-Antivirus	Trojan.Win32.Farfli.elvztf
MicroWorld-eScan	Gen:Variant.Fugrafa.28098
Tencent	Malware.Win32.Gencirc.10b3cd79
Ad-Aware	Gen:Variant.Fugrafa.28098
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Farfli.CQ@7y93vk
BitDefenderTheta	Gen:NN.ZexaF.34684.au0@ayF5O9lj
TrendMicro	BKDR_ZEGOST.SM32
McAfee-GW-Edition	Trojan-FJYJ!C80AF0258225
FireEye	Generic.mg.c80af02582254000
Emsisoft	Gen:Variant.Fugrafa.28098 (B)
Jiangmin	Backdoor.Generic.afkf
Avira	TR/Downloader.Gen4
eGambit	Unsafe.AI_Score_89%
Microsoft	TrojanDownloader:Win32/Nystprac.A
Arcabit	Trojan.Fugrafa.D6DC2
GData	Gen:Variant.Fugrafa.28098
McAfee	Trojan-FJYJ!C80AF0258225
MAX	malware (ai score=87)
VBA32	Backdoor.Farfli
Malwarebytes	Malware.AI.521088740
TrendMicro-HouseCall	BKDR_ZEGOST.SM32
Rising	Malware.Heuristic!ET#90% (RDMK:cmRtazqiNXFKzMvO1/hoFOQGy0XZ)
Yandex	Trojan.GenAsa!jyx+fvnRphc
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/GenKryptik.AGWJ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Fugrafa.28098 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Fugrafa.28098 (B)” infection