About “Fugrafa.297533” infection

The Fugrafa.297533 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.297533 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Fugrafa.297533?


File Info:
name: F53A47BE393DAC2E6BE1.mlw
path: /opt/CAPEv2/storage/binaries/905156277fdd61c1bb8a67aa4a366e87691d652c03216320ddab905571e69489
crc32: F6996E8A
md5: f53a47be393dac2e6be12d9674b9229b
sha1: 9e65b1a1512657cab59970b190791fb1d2ee5377
sha256: 905156277fdd61c1bb8a67aa4a366e87691d652c03216320ddab905571e69489
sha512: 7f7995e246c53b8cc2abf6c6bf07473081926c82c3e2300103f14fddd3f3c6a57792c44000340c9ec192943f638472b82866463ce1564ae05656003644adb3ec
ssdeep: 6144:n9DXo7zvzNrmJ+5MkVV+75+kdAZitLzfBFUQyDtVy2a2uugt7eYoShH:9jyBQ75+kdkit3fBFUQyDgzugRdoS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B9F49D117690C031E3A52772495AE6F00969BD381BA596CFF7A47E39AE301D39A3730F
sha3_384: 6bcb02cd4aefa0efafc18e70630e172f4901e4d2f348fc3e4ddd6242751f43f0299645b9c8b8ee21c112f76e649ee0af
ep_bytes: 895ddc8945e4393d5068440075386a01
timestamp: 2013-12-03 13:19:58

Version Info:
0: [No Data]

Fugrafa.297533 also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.Siggen7.31044
MicroWorld-eScan	Gen:Variant.Fugrafa.297533
FireEye	Generic.mg.f53a47be393dac2e
Skyhigh	BehavesLike.Win32.Generic.bt
McAfee	Artemis!F53A47BE393D
Malwarebytes	CardSpy.Spyware.Stealer.DDS
VIPRE	Gen:Variant.Fugrafa.297533
Sangfor	Worm.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
BitDefender	Gen:Variant.Fugrafa.297533
K7GW	Trojan ( 004bcce41 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Mikey-9891201-0
Rising	Spyware.CardSpy!1.A1A8 (CLASSIC)
Emsisoft	Gen:Variant.Fugrafa.297533 (B)
F-Secure	Trojan.TR/AD.CardSpy.qmfun
Baidu	Win32.Trojan.Urelas.d
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Urelas
Avira	TR/AD.CardSpy.qmfun
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	malware.kb.b.921
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#1qh9wbvygm5p7
Arcabit	Trojan.Fugrafa.D48A3D
GData	Gen:Variant.Fugrafa.297533
Google	Detected
ALYac	Gen:Variant.Fugrafa.297533
DeepInstinct	MALICIOUS
Cylance	unsafe
Tencent	Trojan.Win32.CardSpy.16000130
SentinelOne	Static AI – Malicious PE
AVG	Win32:GenMaliciousA-FYF [Trj]
Cybereason	malicious.151265
Avast	Win32:GenMaliciousA-FYF [Trj]

How to remove Fugrafa.297533?

Fugrafa.297533 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X