Fugrafa.5208 removal tips

The Fugrafa.5208 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fugrafa.5208 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Fugrafa.5208?

File Info:
name: E2A4B3A25480EB3DA29D.mlw
path: /opt/CAPEv2/storage/binaries/c0b4d8777302e6c5b633861079d715cdcc147ba101dde5b720d046bcad705fe1
crc32: BCA26290
md5: e2a4b3a25480eb3da29d2fda68ef2dc3
sha1: 2b542b881b0b7dc3a7627ed812a22b958cb9d8cf
sha256: c0b4d8777302e6c5b633861079d715cdcc147ba101dde5b720d046bcad705fe1
sha512: 2161ec5acdceb3b047084c3345ac0e837e361aa5811a540efe012acb01794aeaab8c6fc1284240f119ae4df8daeb1215e32c2b7634ab9a2d0df3fa310358ab1a
ssdeep: 6144:pbCdhhyzFFEIX0zE9NKFEWNFfK4CS0NwIH2+fFBFFrkipW:pmdXWEIXxcXNkjNHZf1FrVW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14584F135FC1B1409E622CE34F97273BC5A6871AF3B18C5C66740BCD619510AACBFA639
sha3_384: 3cd8a686bbd5329028751fa8a5def5a54105bcf1c6d8d3501e0403df9ed7cabea578e932b9bc4c05637840c572686259
ep_bytes: 558bec51c745fc36c80000e8d0fcffff
timestamp: 2012-08-30 14:20:06

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Windows Winhlp32 Stub
FileVersion: 5.00.2134.1
InternalName: WINHSTB
LegalCopyright: Copyright (C) Microsoft Corp. 1991-1996
OriginalFilename: WINHLP32.EXE
ProductName: Microsoft(R) Windows (R) 2000 Operating System
ProductVersion: 5.00.2134.1
Translation: 0x0409 0x04b0

Fugrafa.5208 also known as:

How to remove Fugrafa.5208?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.