Categories: Malware

Should I remove “Fugrafa.3795”?

The Fugrafa.3795 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.3795 virus can do?

Uses Windows utilities for basic functionality
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities

How to determine Fugrafa.3795?


File Info:
name: 91974EA069D2DCC28EAC.mlwpath: /opt/CAPEv2/storage/binaries/139653a0d717fcb861acca063b5c90663e32215bee9557163fba90204207f8ddcrc32: 9F56807Dmd5: 91974ea069d2dcc28eac3db2561c3558sha1: d1662ab53796b47288d37560614bd94045192cf9sha256: 139653a0d717fcb861acca063b5c90663e32215bee9557163fba90204207f8ddsha512: 884456506137a7af9c1efda1b5125235cf1a901a1cbed53584e5321e24926314b071482e505928880bb3a7c76aa8eb8486e993cd7eb374eead3816dc4a7a98d2ssdeep: 12288:g1nrgOK6j5bfE+yqV03uRsANVX4crD7zdziC2YLNI80n7Wa9Yw:g9rvVbfE+yqa30sANNLXdKYd0nHZtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T13FB4F182B0D49176F5FB2A303475ADA1096CFD704F79A6AF2748562E0FA09D0D936B33sha3_384: 14337aa99e356ba0dc9001d4dda795321ad9f2e608eaf1ba190ab8fef700c977e38231a90e002cabda3dd3b0e57188b3ep_bytes: e869030000e97efeffff558beceb0dfftimestamp: 2018-09-01 03:10:20
Version Info:
Comments: G9TgKVINM3sQfmkROO9N44tpc59oGhVsSSsCEsCDetfsfWRgEdoQ4cPPAkakIGcbAnFvGlRhLmzInilgVhcbnONURla69CompanyName: Windows Adaptive Cards API ServerFileDescription: Device Broker And Policy COM ServerFileVersion: 3.4.4.1InternalName: tasklist.exeLegalCopyright: (C) f7xfpEpyfMhytxZGBCVEZuMIZlxoxtMR4eXm1nIYVIgKm2IU4RckKadZWtyFD Technology Co. Ltd., All rights reserved.OriginalFilename: tasklist.exeProductVersion: 3.4.4.1Translation: 0x0809 0x04b0

Fugrafa.3795 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.3795
FireEye	Generic.mg.91974ea069d2dcc2
ALYac	Gen:Variant.Fugrafa.3795
Malwarebytes	Trojan.MalPack.TCL.Generic
VIPRE	Gen:Variant.Fugrafa.3795
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/Bitmin.dd3e828f
K7GW	CryptoMiner ( 0053e8a51 )
K7AntiVirus	CryptoMiner ( 0053e8a51 )
BitDefenderTheta	AI:Packer.40753AF021
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/CoinMiner.BQI
APEX	Malicious
Kaspersky	Trojan-Downloader.Win32.Bitmin.wva
BitDefender	Gen:Variant.Fugrafa.3795
NANO-Antivirus	Trojan.Win32.CoinMiner.fhnqsq
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10ba4c2c
Sophos	Mal/Generic-S
Zillya	Dropper.Agent.Win32.379060
McAfee-GW-Edition	BehavesLike.Win32.Dropper.hc
Emsisoft	Gen:Variant.Fugrafa.3795 (B)
Ikarus	Trojan.Win32.CoinMiner
GData	Gen:Variant.Fugrafa.3795
Jiangmin	Trojan.Tasker.ai
Antiy-AVL	Trojan[Downloader]/Win32.Bitmin
Xcitium	Malware@#m82ob0av49lc
Arcabit	Trojan.Fugrafa.DED3
ZoneAlarm	Trojan-Downloader.Win32.Bitmin.wva
Microsoft	Trojan:Win32/Occamy.C
Google	Detected
AhnLab-V3	Trojan/Win32.CoinMiner.C2680058
McAfee	GenericRXGI-CY!91974EA069D2
MAX	malware (ai score=100)
VBA32	Trojan.CoinMiner
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Stealer.Arkei!1.B243 (CLASSIC)
Yandex	Trojan.GenAsa!F8+vCzXJLX8
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.069d2d
DeepInstinct	MALICIOUS