About “Fragtor.133989” infection

The Fragtor.133989 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.133989 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Fragtor.133989?


File Info:
name: 51CB4EE43667C678E9E1.mlw
path: /opt/CAPEv2/storage/binaries/781d1cabebebc2fc81eef785af180e9aa4b4b855281cdfd8a7ee7b3198da9d30
crc32: C1D2F611
md5: 51cb4ee43667c678e9e10347ccfd4d32
sha1: ee4ee14f06231102bdc83cb8891d0a7e444d88de
sha256: 781d1cabebebc2fc81eef785af180e9aa4b4b855281cdfd8a7ee7b3198da9d30
sha512: e90605e54829bf0d7c4c4ab859ca580f314a82bf3beeea51c7c228d160b8363f30c125f21811bfbd29becec211aa8baad026a7b676a55b7c322059cdbc6f9076
ssdeep: 12288:HpXb1Xl1X3bVon3tYDG7MzZSHJcvEj8dpoS:HpJHbGdT7Mifj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T175B4CF213690C036E369273148C6E7F466A9BC358995E64FF6B87F395E301938B2724F
sha3_384: a4e08eda8fa7ebae21b84a6f28ba898e827dd4f37489c814151e312db796acdc85cc4888ba6288d01155d5fd0c60e07e
ep_bytes: 6ae0bd9747189351b0ab383b5cffd6aa
timestamp: 2013-10-21 01:51:42

Version Info:
0: [No Data]

Fragtor.133989 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.133989
ClamAV	Win.Packed.Urelas-9879149-0
FireEye	Generic.mg.51cb4ee43667c678
McAfee	Artemis!51CB4EE43667
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
BitDefenderTheta	Gen:NN.ZexaF.36132.HmZ@ay7Nazh
Cyren	W32/Urelas.AP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.133989
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Trojan.Win32.Urelas.16000132
Sophos	Generic ML PUA (PUA)
Baidu	Win32.Trojan.Urelas.a
VIPRE	Gen:Variant.Fragtor.133989
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Fragtor.133989 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Fragtor.133989
Antiy-AVL	Trojan[Downloader]/Win32.Urelas.ab
Xcitium	TrojWare.Win32.Gupboot.SE@53o49t
Arcabit	Trojan.Fragtor.D20B65
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Fragtor.133989
MAX	malware (ai score=84)
Malwarebytes	Crypt.Trojan.Malicious.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CD523
Rising	Trojan.Gupboot!1.9CEA (CLASSIC)
Ikarus	Trojan.Win32.Urelas
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.133989?

Fragtor.133989 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X