Malware

Fragtor.101948 removal guide

Malware Removal

The Fragtor.101948 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.101948 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Network anomalies occured during the analysis.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.101948?


File Info:

name: DB4BFEB5424669E8382F.mlw
path: /opt/CAPEv2/storage/binaries/70ee0869088462c026242d8fbb6b11c673f9cf05ce42c1764ee05488bf6102b5
crc32: 82635567
md5: db4bfeb5424669e8382f8d9fbc809f6a
sha1: 3c82cbdba06df1ef190769e291bb1db8641e4b43
sha256: 70ee0869088462c026242d8fbb6b11c673f9cf05ce42c1764ee05488bf6102b5
sha512: c16b23b8534a5928b2da9a6f26a2cce504a7b09c92b7e06dbbfd1b51596f54b37a910c1c45dd754cdd5fa66081ad311b8879eb63ca7fe9b5c8431abd4b74e65e
ssdeep: 384:tWX0dwTUx90U09RXjXz7XjCWwqK8Wzz8WW5bIwHKZoIkt/I5YojDHvu/7UQx:kX0d3bm9xjXvKBBW5bCpkp+YojDHYUU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1BEC28DCFF6914D71DE960AB1513315394BBFBC646C32A2A19F20EB122C54A70FA3E209
sha3_384: d63d6194b02922ebdb8c0f1b5805b3d6a958cdb18f02f3fe3644f04e19e5107310d63156be371d8495ad633e7e81188e
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.101948 also known as:

DrWebTrojan.MulDrop20.10627
MicroWorld-eScanGen:Variant.Fragtor.101948
FireEyeGeneric.mg.db4bfeb5424669e8
ALYacGen:Variant.Fragtor.101948
CylanceUnsafe
ZillyaTrojan.SelfDel.Win32.65008
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.542466
CyrenW32/Agent.ENB.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.OOO
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fragtor.101948
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.101948
EmsisoftGen:Variant.Fragtor.101948 (B)
VIPREGen:Variant.Fragtor.101948
McAfee-GW-EditionBehavesLike.Win32.Generic.mh
SophosTroj/PWS-CMJ
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Fragtor.101948
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
MAXmalware (ai score=88)
ArcabitTrojan.Fragtor.D18E3C
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
McAfeeGenericRXNV-VM!DB4BFEB54246
TACHYONTrojan/W32.Fugrafa.26112
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.2397151589
APEXMalicious
RisingStealer.Agent!1.DE3E (CLASSIC)
IkarusTrojan.DelFiles
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Fragtor.101948?

Fragtor.101948 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment