Categories: Malware

Fragtor.103425 removal

The Fragtor.103425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.103425 virus can do?

At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Portuguese (Brazil)
Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
Authenticode signature is invalid

How to determine Fragtor.103425?


File Info:
name: AC3E6D30653D2393926E.mlwpath: /opt/CAPEv2/storage/binaries/87edb0fe856b42d4b45459600703640ace53dd09a1fba49e0213806aa7276044crc32: C46A8067md5: ac3e6d30653d2393926ef8ba74d31e77sha1: 076119a5146274cabc0f302691a294b4e6321d15sha256: 87edb0fe856b42d4b45459600703640ace53dd09a1fba49e0213806aa7276044sha512: 65878ec026ce025f52a3850e3da209d4cde5390c223ded7087b17ee96cccbd9094c3cee3fbce3274046851ec44715fb07180cc140071d23eab8a40dc34408b24ssdeep: 24576:Xzyb1/+hW87BRyzDYyWN8dWFOpkoUQcKKVaFTMy:X+kL7jyzDYyWmdW9VaFTtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T154456C25FF009437DA73B6355C5381DDA829B7552D10AC8B2BE42E4CEFB87827C3A256sha3_384: 0a5e88575302ffb8aea7de94db04eb8116306650e1718d7599310c1547767596cd4c8122e4a52665354a726b74016585ep_bytes: 8bc88b55f88b45fce8a4000000ff45f8timestamp: 2010-08-01 10:32:37
Version Info:
CompanyName: JDSOFT SISTEMAS LTDA MEFileDescription: Software de atualizaçãoFileVersion: 2.1.0.23InternalName: nova.exeLegalCopyright: Todos os direitos reservados para JDSOFT SISTEMAS - 2002LegalTrademarks: Todos os direitos reservados para JDSOFT SISTEMAS - 2002OriginalFilename: frm_NovaProductName: Nova JDSOFTProductVersion: 2.1.0.23Comments: Software de Atualização - JDSOFTTranslation: 0x0416 0x04e4

Fragtor.103425 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Fragtor.103425
FireEye	Generic.mg.ac3e6d30653d2393
ALYac	Gen:Variant.Fragtor.103425
Cylance	Unsafe
Zillya	Trojan.Black.Win32.53347
Sangfor	[ASPACK V2.12]
K7AntiVirus	Trojan ( 7000000f1 )
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.514627
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Downloader.Delf.E potentially unsafe
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Fragtor.103425
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Spy.Lnek
Ad-Aware	Gen:Variant.Fragtor.103425
Emsisoft	Gen:Variant.Fragtor.103425 (B)
Comodo	Malware@#2p6osdtoyaesv
F-Secure	Trojan.TR/Spy.Banker.Gen
DrWeb	BackDoor.Attack.1546
VIPRE	Gen:Variant.Fragtor.103425
TrendMicro	TROJ_GEN.R03BC0PFU22
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Fragtor.103425
Avira	TR/Spy.Banker.Gen
Arcabit	Trojan.Fragtor.D19401
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2416312
McAfee	GenericRXEB-XF!AC3E6D30653D
MAX	malware (ai score=88)
VBA32	Backdoor.Attack
Malwarebytes	Malware.Heuristic.1001
TrendMicro-HouseCall	TROJ_GEN.R03BC0PFU22
Yandex	Trojan.GenAsa!rADcSDt47iQ
Ikarus	Trojan.Spy.Banker
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Downloader_Delf
BitDefenderTheta	Gen:NN.ZelphiF.34742.nP0@aav8cLdO
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)