Adware

Should I remove “Adware.Fragtor.4”?

Malware Removal

The Adware.Fragtor.4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Fragtor.4 virus can do?

  • A file was accessed within the Public folder.
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Performs HTTP requests potentially not found in PCAP.
  • Authenticode signature is invalid
  • CAPE detected the shellcode patterns malware family
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Adware.Fragtor.4?


File Info:

name: 85B1D2BBC5A9465DFADD.mlw
path: /opt/CAPEv2/storage/binaries/a1e2ebabc4a0bdab5ab8e6fd935eff355edd66745385154bee74bb9633b7d67c
crc32: D2AB36A4
md5: 85b1d2bbc5a9465dfadd962fd07da9cd
sha1: 8d0c7dcd1925061c8af09412aa9fe34f827338f3
sha256: a1e2ebabc4a0bdab5ab8e6fd935eff355edd66745385154bee74bb9633b7d67c
sha512: a89c76430a0a5ca34b56652a59f17559b246b59b48193265c37bc9bea885f1cf8644fe2012e3bef8ee6cf86bc3074335d0c1da34e3634c2a0ac1078858ca9d78
ssdeep: 1536:/ovFFPsPIU9N1LU84QhFw1AeuRag9xTvR3AWtGYaF12lhZkxcDikL+oH8cnom1:v19vvaiRawpRwWwY4+hZkM58cnZ1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T165837C33B6C5C431F1A109B054E67B12BBB6FF301634CA13EA62098DFF696DD8929356
sha3_384: a01b85979130d8f07989b1e1a258627ed062b9ea9df4be04ff8fc8911e09287bf951a8d925a4d3c57ada9125c5638c49
ep_bytes: 558bec83ec445657ff1504d140008bf0
timestamp: 2006-07-18 10:31:36

Version Info:

CompanyName: WinSoftware, Inc.
FileDescription: WinSoftware, Installer
FileVersion: 1,3,91,3
InternalName: WinSoftware, Installer
LegalCopyright: WinSoftware, Inc.
OriginalFilename: WinSoftware, Installer
ProductName: WinSoftware, Installer
ProductVersion: 1,3,91,3
Translation: 0x0000 0x04e4

Adware.Fragtor.4 also known as:

LionicTrojan.Win32.Agent.lb6w
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Adware.Fragtor.4
FireEyeGeneric.mg.85b1d2bbc5a9465d
CAT-QuickHealDownloader.Winfixer.32516
SkyhighWinFixer
ALYacGen:Variant.Adware.Fragtor.4
Cylanceunsafe
ZillyaDownloader.WinFixer.Win32.385
SangforAdware.Win32.Winfixer.Vhgi
CrowdStrikewin/grayware_confidence_60% (W)
AlibabaDownloader:Win32/WinFixer.e81d087f
ArcabitTrojan.Adware.Fragtor.4
VirITMalware.WinFixer.C
SymantecWinFixer
ESET-NOD32Win32/Adware.WinFixer
CynetMalicious (score: 99)
ClamAVWin.Adware.Downloader-197
Kasperskynot-a-virus:Downloader.Win32.WinFixer.o
BitDefenderGen:Variant.Adware.Fragtor.4
NANO-AntivirusTrojan.Win32.Crypted.deeugd
SUPERAntiSpywareTrojan.WinAntiSpyware/WinAntiVirus 2006
AvastWin32:Adware-gen [Adw]
TencentMalware.Win32.Gencirc.11ba503a
TACHYONTrojan/W32.Agent.88280
SophosWinAntiVirusPro Installer (PUA)
F-SecureAdware.ADWARE/Adware.Gen
DrWebTrojan.DownLoader.10963
VIPREGen:Variant.Adware.Fragtor.4
TrendMicroTROJ_DLOADER.EWR
EmsisoftGen:Variant.Adware.Fragtor.4 (B)
SentinelOneStatic AI – Suspicious PE
JiangminDownloader.WinFixer.d
WebrootAdware.WinAntiVirus.Pro
VaristW32/Downloader.NOWI-0226
AviraADWARE/Adware.Gen
Antiy-AVLTrojan[Downloader]/Win32.WinFixer
KingsoftWin32.Troj.Undef.a
XcitiumApplication.Win32.Adware.WinFixer@4a6c
MicrosoftPUA:Win32/Creprote
ViRobotAdware.WinAntiVirus.R
ZoneAlarmnot-a-virus:Downloader.Win32.WinFixer.o
GDataGen:Variant.Adware.Fragtor.4
GoogleDetected
McAfeeWinFixer
MAXmalware (ai score=100)
VBA32BScope.TrojanFakeAV.PcPrivacyCleaner
MalwarebytesGeneric.Malware.AI.DDS
PandaApplication/ErrorSafe
TrendMicro-HouseCallTROJ_DLOADER.EWR
RisingTrojan.DL.Win32.WinFixer.i (CLASSIC)
YandexTrojan.GenAsa!3zuyqIdnFu4
IkarusTrojan-Dropper.Agent
MaxSecureTrojan.Malware.73479592.susgen
FortinetAdware/WinFixer
AVGWin32:Adware-gen [Adw]
DeepInstinctMALICIOUS

How to remove Adware.Fragtor.4?

Adware.Fragtor.4 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment