Categories: Malware

Fragtor.23498 (B) removal instruction

The Fragtor.23498 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.23498 (B) virus can do?

Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Emumerates physical drives
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Fragtor.23498 (B)?


File Info:
name: D75933AA88FDB23AAA99.mlwpath: /opt/CAPEv2/storage/binaries/8a6dbf53af2ce6db36e16d469882ec09956603f5a71459159dab1182713d96d0crc32: F3FEB366md5: d75933aa88fdb23aaa998fc711ebd090sha1: 39874e22bff3cd7b9688051b9caf9f45fc868974sha256: 8a6dbf53af2ce6db36e16d469882ec09956603f5a71459159dab1182713d96d0sha512: e79b404acc3f4f11b89908bd1be71ebb1f6b495614a1ef0db162d044a78bfc361658dd5e155392b6f6cd39abaebfa11a9dbbdf379b708494d69eda1b2afe4cc9ssdeep: 98304:1vISGb1Ld9w/FmF3CzA70sLfkK9s8TU2moI/1ul6s0Z6BqXdiwhpHZSb0E/Ghu4Y:1PuLdYFmF3CzA70sLfkK9s8TU2bI/1ugtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17B36AFD6934D156ED192D0FEF31FA79255F5AE3A261EC383F380BA2318912D2B664D03sha3_384: dc23bda04975e727c5326eea9dffcc1c0906e5016f26e835163038f9f01b6e3b9a6c18faeb9c1a705e6883af12116232ep_bytes: e887040000e980feffff558bec5156fftimestamp: 2018-08-16 04:40:07
Version Info:
0: [No Data]

Fragtor.23498 (B) also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Fragtor.23498
ALYac	Gen:Variant.Fragtor.23498
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Fragtor.23498
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Softcnapp.BC potentially unwanted
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Fragtor.23498
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Generic.e
Emsisoft	Gen:Variant.Fragtor.23498 (B)
F-Secure	Heuristic.HEUR/AGEN.1319114
McAfee-GW-Edition	BehavesLike.Win32.Generic.rh
FireEye	Generic.mg.d75933aa88fdb23a
Sophos	Softcnapp (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Fragtor.23498
Google	Detected
Avira	HEUR/AGEN.1319114
MAX	malware (ai score=85)
Xcitium	Application.Win32.AdWare.Softcnapp.O@80ok4p
Arcabit	Trojan.Fragtor.D5BCA
ZoneAlarm	HEUR:Trojan.Win32.Generic
Cynet	Malicious (score: 100)
McAfee	Softcnapp
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Adware.Downloader!1.BBEC (CLASSIC)
Ikarus	PUA.Softcnapp
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Softcnapp.BC
BitDefenderTheta	Gen:NN.ZexaF.36348.@BW@aqf8FFaj
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.a88fdb
DeepInstinct	MALICIOUS