Categories: Malware

Fugrafa.3945 removal guide

The Fugrafa.3945 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.3945 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Anomalous file deletion behavior detected (10+)
Dynamic (imported) function loading detected
A process created a hidden window
Installs a browser addon or extension
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality
Behavioural detection: Transacted Hollowing
Installs itself for autorun at Windows startup
Installs itself for autorun at Windows startup
Creates a hidden or system file
Attempts to modify proxy settings
Harvests cookies for information gathering
Uses suspicious command line tools or Windows utilities

Related domains:

wpad.local-net

How to determine Fugrafa.3945?


File Info:
name: 93ABE8D8180621D1F9C3.mlwpath: /opt/CAPEv2/storage/binaries/948d52151b3b29d28ab50aca520aaace2bbba91fbf37d779286eceed0663b6b5crc32: 2FAEAC45md5: 93abe8d8180621d1f9c335d5cac3db09sha1: 51d3ed6381f18370561199e43a8eb7c6924f7b1esha256: 948d52151b3b29d28ab50aca520aaace2bbba91fbf37d779286eceed0663b6b5sha512: 6179b262046f353658d6eb588734e7b88b4bd7e0edcdc715d5bf776d9a966628e60f079156e13516ba1459571ffbc86eebbc2717abf9638ca488e7f5566c9a08ssdeep: 24576:IjSJdBsxi5p7iUAA9UEoUUviMmjpdoaqKIdAMNdVawfI:YKdWxRU5o3iMmjWfdH+type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T103A56C10BB508028F9F311F54ABDA17D941CBDB08BA860CBB1C95BEE96356F07D32697sha3_384: 24c4abff9cb3243891ad9ea45a22599c094a77a9fc62495884f0a6fba012a9f2ec16aa5a5236ef69f26d767f953b076fep_bytes: e999b00500e954e40000e9ff800000e9timestamp: 2018-09-06 10:36:22
Version Info:
0: [No Data]

Fugrafa.3945 also known as:

Lionic	Trojan.Win32.Fugrafa.4!c
MicroWorld-eScan	Gen:Variant.Fugrafa.3945
FireEye	Gen:Variant.Fugrafa.3945
ALYac	Gen:Variant.Fugrafa.3945
K7AntiVirus	Trojan ( 00556dcd1 )
BitDefender	Gen:Variant.Fugrafa.3945
K7GW	Trojan ( 00556dcd1 )
Cybereason	malicious.818062
BitDefenderTheta	AI:Packer.CB4F75911F
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.ABAH
TrendMicro-HouseCall	TROJ_GEN.R002H0CKN21
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Hesv.fphx
Alibaba	Trojan:Win32/Hesv.0e74e07a
Ad-Aware	Gen:Variant.Fugrafa.3945
Emsisoft	Gen:Variant.Fugrafa.3945 (B)
Zillya	Trojan.Hesv.Win32.3976
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tm
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft	Ransom.Win32.Sabsik.sa
GData	Gen:Variant.Fugrafa.3945
McAfee	Artemis!93ABE8D81806
VBA32	Trojan.Hesv
Panda	Trj/CI.A
APEX	Malicious
Tencent	Win32.Trojan.Fugrafa.Htlz
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent.ABAH!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)