Malware

Fragtor.16092 (B) removal

Malware Removal

The Fragtor.16092 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.16092 (B) virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • Unconventionial language used in binary resources: Slovenian
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Fragtor.16092 (B)?


File Info:

crc32: EA1833E8
md5: f8e89c23df2ce92b370ee7195324bb84
name: F8E89C23DF2CE92B370EE7195324BB84.mlw
sha1: 47249df9bdae4ca319493a69d0ae6e42007ea3b5
sha256: ffe39579163c231521098435348019227cca339b735efa33b639acf5bcbaf432
sha512: 16bfe8386df8849f91d3e79db9820d7686e47a96ee53f8be4d978204a4f191ac92d21ab3c31b7f6a8803d57fdf25d96b32e3893f19c3304a8c235dd61dc7ab8b
ssdeep: 3072:hNQnAdJLDmEnBT2fxePg0kI50O4Q/pzT3WItL267+1M:IySEnBT2fxePgO46pzj5tK6c
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: sajzmoamunu.apa
ProductVersion: 7.19.29.38
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0129 0x009f

Fragtor.16092 (B) also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWHacktool ( 700007861 )
Cybereasonmalicious.9bdae4
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FKCI
APEXMalicious
AvastWin32:DropperX-gen [Drp]
KasperskyVHO:Trojan-Downloader.Win32.Upatre.gen
BitDefenderGen:Variant.Fragtor.16092
MicroWorld-eScanGen:Variant.Fragtor.16092
Ad-AwareGen:Variant.Fragtor.16092
SophosML/PE-A
F-SecureTrojan.TR/AD.MalwareCrypter.fexrh
BitDefenderThetaGen:NN.ZexaF.34126.mq0@aihuk2nc
McAfee-GW-EditionBehavesLike.Win32.Emotet.dh
FireEyeGeneric.mg.f8e89c23df2ce92b
EmsisoftGen:Variant.Fragtor.16092 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftRansom:Win32/StopCrypt!ml
ArcabitTrojan.Jaik.DB9E3
GDataGen:Variant.Fragtor.16092
Acronissuspicious
McAfeeRDN/Generic.grp
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack.GS
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.95 (RDML:HHH03uO33vne9yX+FfQIBQ)
IkarusTrojan-Spy.Agent
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:DropperX-gen [Drp]
Paloaltogeneric.ml

How to remove Fragtor.16092 (B)?

Fragtor.16092 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment