Remove FruityArmor APT Group Virus (March 2019 Update)

How irritating is this problem? (4 votes, average: 5.00)

This page aims to help you remove FruityArmor APT Group Virus. Our removal instructions work for every version of Windows.

Trojan Horse infections are nefarious malware programs that are used by their criminal creators for the completion of a wide variety of cyber crimes – from data theft and corruption to total system annihilation, from personal espionage of the targeted victim to inserting even more nasty malware programs the likes of Rootkits, Worms and Ransomware inside the computer. In many cases, a Trojan might even be capable of establishing control over the processes inside the infected machine and allowing the hackers who are using the malware to do as they please with the system of the attacked computer. There really is no end to the potential kinds of harm that such a noxious form of malware could cause once it enters the targeted system. This is also the reason it is so crucial that any Trojan Horse threats that may have invaded your computer get detected and removed on time so that hopefully they couldn’t finish their nefarious task.

In this post, we will tell you about and help you deal with FruityArmor – this malware infection is one of the latest representatives of the Trojan Horse family and as such it is a really advanced and dangerous piece of malware that can be found in many places on the Internet, typically under the guise of something that may initially seem harmless and maybe even helpful or interesting. We will tell you a bit more about the ways a Trojan Horse like this could get distributed down below but before that, you need to make sure to use the guide below in order to remove FruityArmor from your computer in case this threat is currently operating inside your machine’s system. We assume that this is exactly why the lot of you have come to this page so, without further ado, let’s proceed with the removal instructions for this insidious malware piece.

Remove FruityArmor APT  Group Virus

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:



Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Trojan Horse distribution and tips for future protection

As we mentioned above, the typical ways this type of infections get distribute usually have something to do with some form of disguise. Typically, this could be the use of a spam e-mail attachment or of some misleading and fake online request or advert that would usually come from unreliable and sketchy websites. However, pirated programs and any other form of illegal or illegally distributed software could also be used for delivering Trojans like FruityArmor inside the machines of the potential victims. It is, therefore, always a good idea to keep away from sites and pages with obscure and questionable contents and to only use download sources that are secure and reputable. However, even if you are really careful and vigilant, there is still no guarantee that no Trojan could come to you and if your machine gets infected again, this time you may not be able to notice the malware on time since Trojans oftentimes lack visible indications and symptoms of their attack. Due to that, we need to remind you just how important and crucial it is to keep your computer equipped with some form of reliable software security – a strong antivirus program or anti-malware tool such as the one linked in the current page is always good to have in case of any potential malware invasions.


Name FruityArmor
Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms  There may be no symptoms whatsoever. Still, the Trojan may cause crashes, errors, freezes and RAM and CPU spikes in some of the cases so be on the lookout for these as well as for any other form of system disturbance.
Distribution Method The methods used for spreading Trojans are various – anything from spam e-mail attachments to pirated games and misleading ads could be used to distribute such pieces of malware.
Detection Tool

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment