About “Fragtor.243424” infection

The Fragtor.243424 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.243424 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fragtor.243424?


File Info:
name: 909A6EC2FA7AF995A523.mlw
path: /opt/CAPEv2/storage/binaries/ba88ce8c3a5a00c82e6f084ec5b1b65e5083240ff0b58a0e96416aa19958a678
crc32: A14ED169
md5: 909a6ec2fa7af995a523a8444c69a9ae
sha1: 1be339f878b1bfc9d2bfd68ae62344b263b0a0f8
sha256: ba88ce8c3a5a00c82e6f084ec5b1b65e5083240ff0b58a0e96416aa19958a678
sha512: c5219c26bae6b6ee8e6004a06b0892f1199c7f561566224319ae99128a593fce0cc36e30e4a785d99cb71762cdf64d5a4300c6cbe6030f322157c8a91b059b2f
ssdeep: 24576:d9OruDp1bMrr6DnUPZbXgRLhFYw7DrvRL3BYcge8wMOP3f9g+:d9JyZADYcgeT73f9g+
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T15C65BE01F5C340F1C5893174702EBB2F963D56440B245EE7A3D82EA5EEA03E36AF7696
sha3_384: cc1e83f9292cb413182de6c8e84b3529f3fd894ce53d3c8a1bc3d77e41526bedb8e694bc5c26bce029dacf787cf6b156
ep_bytes: ff74240cff74240cff74240ce8bc1e01
timestamp: 2023-03-29 02:21:16

Version Info:
0: [No Data]

Fragtor.243424 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.GameHack.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.243424
FireEye	Generic.mg.909a6ec2fa7af995
Skyhigh	BehavesLike.Win32.Dropper.th
ALYac	Gen:Variant.Fragtor.243424
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 0057fb771 )
K7GW	Unwanted-Program ( 0057fb771 )
CrowdStrike	win/grayware_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZedlaF.36744.xv5@aa4oaMo
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.FGP potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Fragtor.243424
Avast	Win32:MalwareX-gen [Trj]
Emsisoft	Gen:Variant.Fragtor.243424 (B)
VIPRE	Gen:Variant.Fragtor.243424
TrendMicro	TROJ_GEN.R002C0PB124
Sophos	Generic Reputation PUA (PUA)
GData	Gen:Variant.Fragtor.243424
Google	Detected
Antiy-AVL	RiskWare/Win32.Gamehack
Arcabit	Trojan.Fragtor.D3B6E0
Microsoft	Program:Win32/Wacapew.C!ml
Varist	W32/GameHack.AL.gen!Eldorado
AhnLab-V3	Malware/Win.MX.R577678
McAfee	GenericRXMR-MX!909A6EC2FA7A
MAX	malware (ai score=88)
Malwarebytes	GameHack.HackTool.RiskWare.DDS
TrendMicro-HouseCall	TROJ_GEN.R002C0PB124
Rising	Trojan.Generic@AI.97 (RDML:qQsU2kJ4Hj2t4ZU6Pl3CrQ)
Yandex	Riskware.Agent!lYAE7ERRiHE
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/GameHack
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.243424?

Fragtor.243424 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X