Fugrafa.40956 removal guide

The Fugrafa.40956 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.40956 virus can do?

Anomalous binary characteristics

How to determine Fugrafa.40956?


File Info:
crc32: C7A0EA2A
md5: 3b87120bbc429fe56379f58f163e90d7
name: 3B87120BBC429FE56379F58F163E90D7.mlw
sha1: bb96f003c3ea59de66d702492a7a6543a6d26f0c
sha256: edd09032864ce61add5b048817cef7019ff7e043205572912ab3536583464dbc
sha512: 85a1305e52861c460b8f30e9737404790056f5b6c72a245f7d66a6d85c95e2587b4bf3a9bb96eb6fd28a157c682ebb97821537ce59d6be63ee1866ab09ad493e
ssdeep: 49152:7/dvDllxzT2I9eT831VHgOGfAVHgOGffpd+JgWnReq:xvDllxD4T8THgObHgOp
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: CTFMON
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
OleSelfRegister: 
ProductVersion: 5.1.2600.2180
FileDescription: CTF Loader
OriginalFilename: CTFMON.EXE
Translation: 0x0409 0x04b0

Fugrafa.40956 also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.40956
FireEye	Generic.mg.3b87120bbc429fe5
CAT-QuickHeal	Trojan.Wacatac
McAfee	Artemis!3B87120BBC42
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
BitDefender	Gen:Variant.Fugrafa.40956
Cyren	W32/Agent.BUU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Alibaba	Worm:Win32/Bloored.1df78cc3
Ad-Aware	Trojan.GenericKD.33681992
Emsisoft	Gen:Variant.Fugrafa.40956 (B)
F-Secure	Heuristic.HEUR/AGEN.1137911
McAfee-GW-Edition	BehavesLike.Win32.Virut.rm
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1137911
Microsoft	Trojan:Win32/Ymacco.AAED
Gridinsoft	Ransom.Win32.Wacatac.oa
Arcabit	Trojan.Fugrafa.D9FFC
GData	Trojan.GenericKD.33681992
ALYac	Trojan.GenericKD.33681992
MAX	malware (ai score=84)
Ikarus	Worm.Win32.Bloored
eGambit	Unsafe.AI_Score_96%
Fortinet	W32/SPNR.15EG12!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/HEUR/QVM41.2.547C.Malware.Gen

How to remove Fugrafa.40956?

Fugrafa.40956 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X