Malware

Fragtor.142880 removal guide

Malware Removal

The Fragtor.142880 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.142880 virus can do?

  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities

How to determine Fragtor.142880?


File Info:

name: 9DE4CFFC1B2ED235FDEE.mlw
path: /opt/CAPEv2/storage/binaries/27f0dba50c97ee2a85d8bf20071bd64d5bed2c14a9a3a72a49979c1c21136c5b
crc32: 4D1A9B01
md5: 9de4cffc1b2ed235fdee04e0c3d06bb8
sha1: 8b783318941a33a2289dbfbacc402ec01756b701
sha256: 27f0dba50c97ee2a85d8bf20071bd64d5bed2c14a9a3a72a49979c1c21136c5b
sha512: 1dea4692181b29f093f441bf054a058b1b858d497f40a85ee1e41a8c6f7dd557b40b8855558f63524131482e8d07af76a4b5bd6f35b720cbf3200f4621f3513f
ssdeep: 768:8LgdbnAUd9xjXvKBBW5bi4JVqx4CNZACM:82AeDjSBBW1JVqxJ8
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CDC26B47FB904CB1CE9004F9356B987983FF7432273EA5835B65EA36A9E7064D60838D
sha3_384: 41ac0dc92a3b33aaf43f47cb7089a2b2c140273f5a93d290315cfdfa4a4b170a83909040495b5f37448485a59fc5d77b
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:

0: [No Data]

Fragtor.142880 also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanGen:Variant.Fragtor.142880
ClamAVWin.Malware.Fugrafa-9950512-0
CAT-QuickHealTrojan.Stealer.S28360516
McAfeeGenericRXNV-VM!9DE4CFFC1B2E
CylanceUnsafe
ZillyaTrojan.SelfDel.Win32.65008
SangforSuspicious.Win32.Save.a
K7AntiVirusPassword-Stealer ( 005937271 )
K7GWPassword-Stealer ( 005937271 )
Cybereasonmalicious.c1b2ed
CyrenW32/Agent.ENB.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/PSW.Agent.OOO
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.SelfDel.pef
BitDefenderGen:Variant.Fragtor.142880
NANO-AntivirusTrojan.Win32.SelfDel.jpepdv
SUPERAntiSpywareTrojan.Agent/Gen-Stealer
AvastWin32:Malware-gen
TencentTrojan.Win32.Selfdel.xb
Ad-AwareGen:Variant.Fragtor.142880
TACHYONTrojan/W32.Fugrafa.26112
SophosTroj/PWS-CMJ
DrWebTrojan.MulDrop20.10627
VIPREGen:Variant.Fragtor.142880
McAfee-GW-EditionGenericRXNV-VM!9DE4CFFC1B2E
FireEyeGeneric.mg.9de4cffc1b2ed235
EmsisoftGen:Variant.Fragtor.142880 (B)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Fragtor.142880
JiangminTrojan.Selfdel.rft
AviraHEUR/AGEN.1234650
Antiy-AVLGrayWare/Win32.SelfDef.a
ArcabitTrojan.Fragtor.D22E20
MicrosoftTrojan:Win32/Fragtor.EL!MTB
GoogleDetected
AhnLab-V3Malware/Win.Reputation.R496203
Acronissuspicious
ALYacGen:Variant.Fragtor.142880
MAXmalware (ai score=80)
VBA32BScope.Trojan.Occamy
MalwarebytesMalware.AI.3582201929
RisingStealer.Agent!1.DE3E (CLASSIC)
IkarusTrojan.DelFiles
MaxSecureTrojan.Malware.5437263.susgen
FortinetW32/SelfDef.26C0!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Fragtor.142880?

Fragtor.142880 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment