Categories: Malware

Should I remove “Fragtor.141766”?

The Fragtor.141766 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.141766 virus can do?

Unconventionial language used in binary resources: Arabic (Oman)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Fragtor.141766?


File Info:
name: 488E8D809F7A6729A203.mlwpath: /opt/CAPEv2/storage/binaries/b8713f152c8de9922e598c0dbb37f1062def9ad5994cad5152a3b188d983f1d8crc32: BD070A54md5: 488e8d809f7a6729a20364befc44dc84sha1: deb9af3027709c65bc8e5941bf5dfb4f3e86fe66sha256: b8713f152c8de9922e598c0dbb37f1062def9ad5994cad5152a3b188d983f1d8sha512: 6f5fc48b2dccd005b8c3d43b9f68502debf29d36cf6488ca476062eabb01c9c4d3aaf7442899b51e26ddef29e45eb5c87fecb8f6fb70ebe81a07547cb04fc99fssdeep: 6144:bzx2VdBNhAjDdU3ynzrTbmPG0NCyA5LnJ6rqWN:bNcdHCyCzrvmPG0EtnyDNtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CF24125E2A609C13E932177BD4F3E7B83BD89E505C4E5B831400BF6F2AFD89B1925096sha3_384: b0d01ab7e50812ec589eac648919b4ee93c47cd37f9375b366c14b017421958e8e4878515b213f04100f4ffb94dbbf05ep_bytes: 60be004045008dbe00d0faffc787a080timestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: Goоgle Inc.FileDescription: Desktop Search EngineFileVersion: 8.5.0.1InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: ProductVersion: 1.0.0.0Comments: Translation: 0x0409 0x04e4

Fragtor.141766 also known as:

Cynet	Malicious (score: 100)
VIPRE	Gen:Variant.Fragtor.141766
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Fragtor.141766
Cybereason	malicious.09f7a6
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Spy.Delf.QTM
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Fragtor.141766
Avast	Win32:Adware-gen [Adw]
Emsisoft	Gen:Variant.Fragtor.141766 (B)
Trapmine	malicious.moderate.ml.score
FireEye	Gen:Variant.Fragtor.141766
Sophos	Mal/DelfSpy-F
Ikarus	Trojan.Win32.Redcontrole
Webroot	W32.Trojan.Gen
Google	Detected
MAX	malware (ai score=85)
Antiy-AVL	Trojan[Spy]/Win32.Delf
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Fragtor.D229C6
GData	Gen:Variant.Fragtor.141766
AhnLab-V3	Trojan/Win.Generic.R438850
VBA32	BScope.Trojan.Agent
ALYac	Gen:Variant.Fragtor.141766
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:u4qKb3Ihw1CBPDUiEtga1Q)
Yandex	Trojan.GenAsa!mQ3+XHe10x4
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Delf
BitDefenderTheta	AI:Packer.44F9DC5015
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)