Malware

Fragtor.188090 removal

Malware Removal

The Fragtor.188090 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.188090 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with Themida
  • Authenticode signature is invalid
  • Checks for the presence of known windows from debuggers and forensic tools
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Fragtor.188090?


File Info:

name: 93F04021FFB84FF9E99B.mlw
path: /opt/CAPEv2/storage/binaries/d8ed5e95169505de5c6c0003f65283b4a0403f6bf938f8878b08d93de2d71bd0
crc32: B6D02BFC
md5: 93f04021ffb84ff9e99b677d941efb3d
sha1: 008fe24a4838ca2d4b739361784d46ea8907e5f1
sha256: d8ed5e95169505de5c6c0003f65283b4a0403f6bf938f8878b08d93de2d71bd0
sha512: dd27ca01c4a0d74f1b7af3326c00af055093a70757d0b386fbc95fd4451368f7fb47a41d725b3cf0fd10f58f1fb9ed001ea9324cefcb187cd63d584017c6d226
ssdeep: 98304:rmyD627wYh4gyRZxuKbwL6/i36oo+3wpUGvJzGzGNmZ:rD+27wYhDyR0LWoz3yYzkG
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10A3633235BBC2BEBCB706DB813915A9B15616E247E78399EE79134CF9A70C503F24138
sha3_384: 8fb7d66602acd447c2b2c9b787c0e4332e737fc21748d97b41bc9affe278eae58e3a0363c77c31694541095207575896
ep_bytes: e84b0100005389e3538b73088b7b10fc
timestamp: 2023-01-04 06:31:24

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: bot.exe
LegalCopyright:
OriginalFilename: bot.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Fragtor.188090 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
AVGWin32:Evo-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.188090
FireEyeGeneric.mg.93f04021ffb84ff9
McAfeeArtemis!93F04021FFB8
Cylanceunsafe
VIPREGen:Variant.Fragtor.188090
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005577791 )
AlibabaTrojanPSW:MSIL/Stealerium.a82736cc
K7GWTrojan ( 005577791 )
Cybereasonmalicious.1ffb84
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/GenKryptik.GEXB
CynetMalicious (score: 100)
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-PSW.MSIL.Stealerium.dp
BitDefenderGen:Variant.Fragtor.188090
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Evo-gen [Trj]
TencentMsil.Trojan-QQPass.QQRob.Yimw
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.XPACK.Gen
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Fragtor.188090 (B)
IkarusTrojan.SuspectCRC
GDataGen:Variant.Fragtor.188090
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.GenKryptik
ArcabitTrojan.Fragtor.D2DEBA
ZoneAlarmTrojan-PSW.MSIL.Stealerium.dp
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36196.@F0@aCIbN2ji
ALYacGen:Variant.Fragtor.188090
MAXmalware (ai score=80)
MalwarebytesTrojan.MalPack.Themida
PandaTrj/Genetic.gen
RisingTrojan.Generic@AI.100 (RDML:P4WzNNx1O0lpTKIfdiJVyw)
SentinelOneStatic AI – Malicious PE
FortinetW32/CoinMiner.HRI!tr
ZonerProbably Heur.ExeHeaderL
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Fragtor.188090?

Fragtor.188090 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment