About “Fugrafa.78438” infection

The Fugrafa.78438 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fugrafa.78438 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fugrafa.78438?


File Info:
name: A098D91F04EB259BF274.mlw
path: /opt/CAPEv2/storage/binaries/b0d974b590a67ff642a60033b1acdbec37f9dc13b3bf49aead70bd3ef96a0d42
crc32: B1868A4D
md5: a098d91f04eb259bf27432e81a9c523b
sha1: a359d15c1055fe8574eb0a68f429c6ee4f0894ff
sha256: b0d974b590a67ff642a60033b1acdbec37f9dc13b3bf49aead70bd3ef96a0d42
sha512: ebab90ee5bda8672dabd8dc37fa573658bcc91b3799504de62f429fc6e721d42196004792329b2dcbdc2d4452ff1f4f3395fabd43367bab2fd294b004b1d61a9
ssdeep: 768:w6DT2Rji7JZ0bAV+Yi9fJGQnfZU9qZU9A2:TDKRKwYgfpf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T173636116AA014854F71C0F305A56F9E009AA9D3D29E8F58FF63CBD3A69321D399B314F
sha3_384: 3d2bf026a6121b0a9ae275e760eed8b07a4fb443dcb6949203f3cf12672d48e21707ad29e805bfa830405ee31f126c8e
ep_bytes: e87a040000e933fdffff8bff558bec81
timestamp: 2018-12-04 06:29:56

Version Info:
FileDescription: Windows Application Services
FileVersion: 2, 0, 0, 0
InternalName: Windows Application Services
LegalCopyright: Microsoft Copyright (C) 2007
OriginalFilename: Windows Application Services
ProductName: Windows Application Services
ProductVersion: 2, 0, 0, 0
Translation: 0x0409 0x04b0

Fugrafa.78438 also known as:

Lionic	Trojan.Win32.Agent.m!c
MicroWorld-eScan	Gen:Variant.Fugrafa.78438
FireEye	Generic.mg.a098d91f04eb259b
McAfee	GenericRXLT-KT!A098D91F04EB
Cylance	Unsafe
VIPRE	Gen:Variant.Fugrafa.78438
Sangfor	Backdoor.Win32.Bitter.IOC
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Fugrafa.78438
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.f04eb2
VirIT	Trojan.Win32.Genus.FVH
Symantec	Trojan.Bitartra
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FGZ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	Backdoor.Win32.Agent.mytnlb
Alibaba	TrojanDownloader:Win32/Bitter.7306a4cb
NANO-Antivirus	Trojan.Win32.Generic.flscxk
Rising	Trojan.Generic@AI.82 (RDMK:djXyEP4/6Z3h4dTOXSWHTA)
Ad-Aware	Gen:Variant.Fugrafa.78438
Sophos	Mal/Generic-R + Troj/Bitter-E
Comodo	Malware@#1vzezql9pxbtc
DrWeb	Trojan.DownLoader27.21543
Zillya	Backdoor.Agent.Win32.71503
McAfee-GW-Edition	GenericRXLT-KT!A098D91F04EB
Emsisoft	Trojan-Downloader.Agent (A)
Ikarus	Trojan-Downloader.Win32.Agent
Jiangmin	Backdoor.Agent.etd
Avira	BDS/Agent.fkvpx
Antiy-AVL	Trojan/Generic.ASMalwS.61
Microsoft	Trojan:Win32/Occamy.CB0
GData	Gen:Variant.Fugrafa.78438
Google	Detected
AhnLab-V3	Trojan/Win32.Tiggre.C2952829
BitDefenderTheta	Gen:NN.ZexaF.34606.eu0@aOR8TLmi
ALYac	Trojan.Agent.Occamy.A
MAX	malware (ai score=100)
VBA32	Backdoor.Agent
Panda	Trj/GdSda.A
Tencent	Win32.Backdoor.Agent.Lkxc
Yandex	Backdoor.Agent!Rq3OWUOjcyw
MaxSecure	Trojan.Malware.7176781.susgen
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Fugrafa.78438?

Fugrafa.78438 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X