Malware

Fragtor.106515 removal tips

Malware Removal

The Fragtor.106515 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.106515 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • A process created a hidden window
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.106515?


File Info:

name: 770DEB66795D5A82F9DB.mlw
path: /opt/CAPEv2/storage/binaries/da48f255fd42589298342a011809b0e30115dec5520c62b96b9a43c6cb3b7908
crc32: 9CD73D95
md5: 770deb66795d5a82f9db793b7e28c8e1
sha1: a0ec039734ddf0cbea07ab8bc43c40596a4bda2f
sha256: da48f255fd42589298342a011809b0e30115dec5520c62b96b9a43c6cb3b7908
sha512: b8fe877c53fd81c420b11f6b70c3578716c2ae185981eb2851854ee4925ca7815e2b4a126114d4dc1e7b08ecb991e2b356d00a7d6cde314e054554346c2de3d9
ssdeep: 384:8UWAZU9Ux9DE09RXjXz7XjCWwqK8Wzz8WW5bIwHCEpmKYE7DqI7NLn1:8rAZZb39xjXvKBBW5bXpmH+Dn1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15DC28E97BA904C31EBC141F05673DA784ABEB6602E30B6C79F60D9550DA70A0FA1D68F
sha3_384: f760fe2ff28609d145c6464ce8198bc5cb5f38b8a2cf32176b6d92f3e8e405633bc91c65a80dbbca09c2ae5e9b7cfe60
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.106515 also known as:

MicroWorld-eScanGen:Variant.Fragtor.106515
FireEyeGeneric.mg.770deb66795d5a82
ALYacGen:Variant.Fragtor.106515
MalwarebytesMalware.AI.2397151589
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.6795d5
CyrenW32/Agent.ENB.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
ClamAVWin.Malware.Fugrafa-9950512-0
KasperskyHEUR:Trojan.Win32.SelfDel.vho
BitDefenderGen:Variant.Fragtor.106515
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.106515
SophosTroj/PWS-CMJ
DrWebTrojan.MulDrop20.10627
ZillyaTrojan.SelfDel.Win32.65008
McAfee-GW-EditionGenericRXNV-VM!770DEB66795D
EmsisoftGen:Variant.Fragtor.106515 (B)
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
GDataGen:Variant.Fragtor.106515
CynetMalicious (score: 100)
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
McAfeeGenericRXNV-VM!770DEB66795D
MAXmalware (ai score=83)
VBA32BScope.Trojan.Occamy
RisingStealer.Agent!1.DE3E (CLASSIC)
TACHYONTrojan/W32.Fugrafa.26112
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Fragtor.106515?

Fragtor.106515 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment