Fragtor.15265 (B) removal tips

The Fragtor.15265 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.15265 (B) virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
A process created a hidden window
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Modifies boot configuration settings
Installs itself for autorun at Windows startup
Writes a potential ransom message to disk
Clears Windows events or logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Fragtor.15265 (B)?


File Info:
crc32: A04750E4
md5: e01007b2ff8fcb64c2ce71d7c54d29be
name: E01007B2FF8FCB64C2CE71D7C54D29BE.mlw
sha1: ee4ffd48637959a5fb999608e22eb4a0487d6dff
sha256: bc7a8a1a103aba8623b7cb73a8c32d5a3a9a8550d1a0fabbb1a01a48497ad0fb
sha512: 9f4f95fe0c42da2e05cf9d216bb8258a2faee077e35ca084c4f28cd52e62ceb5abd81932f39c6fe3b2cb8b798c521683d32fb47434a4bc2f707b7e1da52c5fa2
ssdeep: 12288:2ft8j6SzcsMO4hWEfp+YwWEmlKg7CyduX2Btu:KC6SbMO4hNf02ldJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: saxzmoimoku.apa
ProductVersion: 7.12.29.13
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0181 0x009f

Fragtor.15265 (B) also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056d16b1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Fragtor.15265
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 0056d16b1 )
Cyren	W32/Kryptik.EWJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HMID
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan.Win32.DelShad.gen
BitDefender	Gen:Variant.Fragtor.15265
MicroWorld-eScan	Gen:Variant.Fragtor.15265
Ad-Aware	Gen:Variant.Fragtor.15265
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34126.Iq0@a8d0C9aG
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
FireEye	Generic.mg.e01007b2ff8fcb64
Emsisoft	Gen:Variant.Fragtor.15265 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Microsoft	Trojan:Win32/Azorult.RF!MTB
Gridinsoft	Ransom.Win32.STOP.bot!se59275
Arcabit	Trojan.Fragtor.D3BA1
ZoneAlarm	HEUR:Trojan.Win32.DelShad.gen
GData	Win32.Trojan.PSE.1A0OZZL
AhnLab-V3	CoinMiner/Win.Glupteba.R440044
Acronis	suspicious
McAfee	Packed-GDT!E01007B2FF8F
MAX	malware (ai score=84)
VBA32	BScope.Backdoor.Mokes
Malwarebytes	Trojan.MalPack
Panda	Trj/Genetic.gen
Rising	Trojan.Kryptik!1.D91D (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.FJYS!tr
AVG	Win32:DropperX-gen [Drp]

How to remove Fragtor.15265 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Fragtor.15265 (B) removal tips