Fugrafa.32667 (B) (file analysis)

The Fugrafa.32667 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.32667 (B) virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

tji.zhilingshidai.com

a.tomx.xyz

How to determine Fugrafa.32667 (B)?


File Info:
crc32: 70B5F5C1
md5: 9fa29d0fa9b44b992729377e94e55d10
name: setup_xsytg001.exe
sha1: f9687e4a823e877b10fa8f9f0f2acc31630d518e
sha256: 11ae02c886ab0f44a26289d0fb157b3142dc996cffef7244ec96670d78fecedb
sha512: 3bb7daed6be5f5e35bf1c1ec1656aa29ae9944e7aaec9ed752fa39e2e2c8bbcd2d41234c88c27e9e804d7fd002e373074f3f58f95316365d65138cba11450d1e
ssdeep: 196608:bldi5UYJ4cqMR/9iQbZKG90Q/zqRGDnWQqoAxIM2iYW6iMa1ZKuMaP4de5MJJ:b3RMR/EQbsG9ARKWdIM2iTqJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: x65b0x901fx538bx7f29
FileVersion: 1.0.5.20331
CompanyName: x56dbx5dddx667ax9886x65f6x4ee3x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: x65b0x901fx538bx7f29
ProductVersion: 1,0,5,20331
FileDescription: x65b0x901fx538bx7f29
OriginalFilename: Install.exe
Translation: 0x0804 0x04b0

Fugrafa.32667 (B) also known as:

MicroWorld-eScan	Gen:Variant.Fugrafa.32667
FireEye	Generic.mg.9fa29d0fa9b44b99
ALYac	Gen:Variant.Fugrafa.32667
Cylance	Unsafe
K7AntiVirus	Adware ( 005585a51 )
BitDefender	Gen:Variant.Fugrafa.32667
K7GW	Adware ( 005585a51 )
Cyren	W32/Trojan.PFTG-5289
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H0CD520
Avast	Win32:AdwareX-gen [Adw]
GData	Gen:Variant.Fugrafa.32667
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Burden.gen
Alibaba	AdWare:Win32/Softcnapp.59a03ed1
Rising	Adware.Agent!1.C12F (CLOUD)
F-Secure	PotentialRisk.PUA/Softcnapp.Gen
Invincea	heuristic
McAfee-GW-Edition	Artemis!PUP
Emsisoft	Gen:Variant.Fugrafa.32667 (B)
Ikarus	PUA.Softcnapp
Jiangmin	Trojan.Snojan.btm
eGambit	Unsafe.AI_Score_98%
Avira	PUA/Softcnapp.Gen
MAX	malware (ai score=84)
Endgame	malicious (high confidence)
Arcabit	Trojan.Fugrafa.D7F9B
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Burden.gen
Microsoft	PUA:Win32/Softcnapp
AhnLab-V3	PUP/Win32.RL_Generic.R328901
McAfee	Artemis!9FA29D0FA9B4
VBA32	BScope.Adware.Softcnapp
Panda	Trj/CI.A
APEX	Malicious
ESET-NOD32	a variant of Win32/Softcnapp.AW potentially unwanted
Fortinet	Riskware/Softcnapp
AVG	Win32:AdwareX-gen [Adw]
Paloalto	generic.ml

How to remove Fugrafa.32667 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Fugrafa.32667 (B) (file analysis)