Categories: Malware

How to remove “Fugrafa.31689”?

The Fugrafa.31689 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.31689 virus can do?

Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Attempts to repeatedly call a single API many times in order to delay analysis time
Behavior consistent with a dropper attempting to download the next stage.
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

townpaolo.club

strangerthingz.club

How to determine Fugrafa.31689?


File Info:
crc32: B408C79Bmd5: ce9f4bc552d8a2310560fc7ab1be6670name: CE9F4BC552D8A2310560FC7AB1BE6670.mlwsha1: f21b460067de6d4bd482917627f5bd3bddafb422sha256: 1a2f99b2058c85a753cbdeadbb1ed43da29b5776177b6a77912158620cf25ffcsha512: 05fc0dde176501a2b97ac942e4cbd919ea71bafda4e13821d597d74718f372462ae2b6d0960517fae0757fd16fefff102b7c715f636d88d3332135f924e92698ssdeep: 3072:ArV1c41UtsulhgCY78euRLQgyumR9dxY1X3+u7rXdFLuXH/3rDbgcpvrnwctI/Jz:Ao4UHNE4m7gX37fSDbgc5wctIRztype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
LegalCopyright: qrood RestGeek. All rights reserved.InternalName: desob Software Assistant 32FileVersion: 9.14.2.7CompanyName: DojertComments: krem Install software 32ProductName: brin NSIS 32 bit installer vasProductVersion: 9.14.2.7Translation: 0x0409 0x04b0

Fugrafa.31689 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.InstallMonster.2414
Cynet	Malicious (score: 100)
CAT-QuickHeal	PUA.MauvaiseRI.S5255025
ALYac	Gen:Variant.Fugrafa.31689
Cylance	Unsafe
Zillya	Downloader.Tovkater.Win32.580
Sangfor	Trojan.Win32.Tovkater.GX
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.552d8a
Cyren	W32/Tovkater.Q.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Downloader.Tovkater-6646851-0
Kaspersky	Trojan-Downloader.Win32.Tovkater.asgv
BitDefender	Gen:Variant.Fugrafa.31689
NANO-Antivirus	Trojan.Win32.InstallMonster.icpuvc
MicroWorld-eScan	Gen:Variant.Fugrafa.31689
Tencent	Win32.Trojan-downloader.Tovkater.Tccl
Sophos	Mal/Generic-S
Comodo	Application.Win32.InstallMonster.DX@7e9j3l
F-Secure	Adware.ADWARE/InstMonster.Gen7
BitDefenderTheta	Gen:NN.ZexaF.34236.hy0@a0X06lpi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Possible_HPGen-32
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.ce9f4bc552d8a231
Emsisoft	Gen:Variant.Fugrafa.31689 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1117983
Antiy-AVL	Trojan[Downloader]/Win32.Tovkater
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Arcabit	Trojan.Fugrafa.D7BC9
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Fugrafa.31689
AhnLab-V3	Downloader/Win32.Tovkater.R213681
Acronis	suspicious
McAfee	Artemis!CE9F4BC552D8
MAX	malware (ai score=100)
VBA32	TrojanDownloader.Tovkater
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Possible_HPGen-32
Rising	Malware.Obscure/Heur!1.9E03 (CLASSIC)
Yandex	Trojan.Agent!BiWgCEYqhdk
Fortinet	W32/Tovkater.GX!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml