Malware

Fugrafa.79271 malicious file

Malware Removal

The Fugrafa.79271 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fugrafa.79271 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Detects Sandboxie through the presence of a library
  • Executed a process and injected code into it, probably while unpacking
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Fugrafa.79271?


File Info:

crc32: 07F7795B
md5: dd608b6a45ff2b27eb6174d725705125
name: DD608B6A45FF2B27EB6174D725705125.mlw
sha1: 841159c52ece6e71aeb04d6e3f9c4616726f4b83
sha256: c47e651ccbdc6506e976d2e45d13b428816d72a880660c2d906d916a0d035afc
sha512: 9e24dc13abcd3adede0de6f26a35640da420a603db3987a8156894cae1d0b40d4b78409fe8088aa57c0c4de7426e613c05a41a110ee76a74bee1323ef6b7fed8
ssdeep: 6144:Qh2HPVjrLwu4iDBLTKOha6Q+I7qlBESYT:Qh2HPVjr5LDBLTKOhzZI7+O
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Fugrafa.79271 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan-Downloader ( 004f85331 )
LionicTrojan.Win32.Yakes.4!c
Elasticmalicious (high confidence)
ALYacGen:Variant.Fugrafa.79271
CylanceUnsafe
ZillyaTrojan.Smokeloader.Win32.34
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojan:Win32/Yakes.566a42f8
K7GWTrojan-Downloader ( 004f85331 )
Cybereasonmalicious.a45ff2
BitDefenderThetaGen:NN.ZexaF.34058.uqW@a46!X5di
SymantecTrojan.Gen.MBT
ESET-NOD32Win32/Smokeloader.A
APEXMalicious
AvastWin32:Rootkit-gen [Rtk]
CynetMalicious (score: 99)
KasperskyTrojan.Win32.Yakes.vtle
BitDefenderGen:Variant.Fugrafa.79271
NANO-AntivirusTrojan.Win32.Yakes.eykrzz
MicroWorld-eScanGen:Variant.Fugrafa.79271
TencentWin32.Trojan.Yakes.Wtnc
Ad-AwareGen:Variant.Fugrafa.79271
SophosMal/Generic-S
ComodoMalware@#16lyen84esl0f
DrWebBackDoor.IRC.Bot.3897
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.fm
FireEyeGeneric.mg.dd608b6a45ff2b27
EmsisoftGen:Variant.Fugrafa.79271 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Yakes.zad
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1142675
Antiy-AVLTrojan/Generic.ASMalwS.24B8DD7
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Fugrafa.D135A7
ZoneAlarmTrojan.Win32.Yakes.vtle
GDataGen:Variant.Fugrafa.79271
AhnLab-V3Malware/Win32.Generic.C2418377
Acronissuspicious
McAfeeGeneric.dqa
MAXmalware (ai score=98)
VBA32Trojan.Yakes
MalwarebytesMalware.AI.1849628423
PandaTrj/CI.A
RisingTrojan.Generic@ML.92 (RDML:cAOvUTZMsIFiL2ko2qURlw)
YandexTrojan.Yakes!gZUUgr1oIU0
IkarusTrojan-Ransom.GandCrab
FortinetW32/Zurgop.CO!tr.dldr
AVGWin32:Rootkit-gen [Rtk]
Paloaltogeneric.ml
Qihoo-360Win32/Botnet.Yakes.HgIASQ0A

How to remove Fugrafa.79271?

Fugrafa.79271 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment