Malware

Fragtor.24968 (B) removal guide

Malware Removal

The Fragtor.24968 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.24968 (B) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Steals private information from local Internet browsers
  • Likely virus infection of existing system binary

How to determine Fragtor.24968 (B)?


File Info:

name: FCE31F72F5FD99CC99DF.mlw
path: /opt/CAPEv2/storage/binaries/df5e53e61bec3308358cfc6dd27eba0dbca352258afbb9b04db887e2f4d1d3ba
crc32: 20AFF9DD
md5: fce31f72f5fd99cc99dff97fc243ddd8
sha1: 74717b6a11a273cefb667a726a7ee228ae1c7777
sha256: df5e53e61bec3308358cfc6dd27eba0dbca352258afbb9b04db887e2f4d1d3ba
sha512: b0cfe545dcd77228bcddb238f2e6cd6cba2bce4342a345bc3125190cb8e4781bde465b7e5c263ce2c6af64e9775d915c4ebe66e82468de459ffc4e21d001ab49
ssdeep: 49152:LunM+WIrQunM+klunM+hCY54punM+ZzANE5DCunM+K7DeunM+dZqmunM+dHMunMr:8S7YtANE5i7DdchUoJ2D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D95E0007EBCE722EE5B653672F25A60517ABD02933406DF5A51391A22B3EF05B373C6
sha3_384: 981fef6a844c81e0ffab19d7d039d6d347d21a147066fce1a9df20cded0a35e23f8bb8b38a2caef0495e5753f90c8e0a
ep_bytes: 558bec6aff680063570068344a570064
timestamp: 2021-09-23 15:24:54

Version Info:

CompanyName: SharpNight Co,Ltd
FileDescription: 7-Data Recovery Suite
FileVersion: 4.4.0.0
LegalCopyright: Copyright 2019, SharpNight Co,Ltd, All rights reserved.
ProductName: 7-Data Recovery Suite
ProductVersion: 4.4.0.0
Translation: 0x0409 0x03a8

Fragtor.24968 (B) also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.31042
MicroWorld-eScanGen:Variant.Fragtor.24968
FireEyeGeneric.mg.fce31f72f5fd99cc
ALYacGen:Variant.Fragtor.24968
CylanceUnsafe
K7AntiVirusTrojan ( 0058827d1 )
AlibabaTrojanDownloader:Win32/Kryptik.57de074a
K7GWTrojan ( 0058827d1 )
BitDefenderThetaGen:NN.ZexaF.34084.4D0@aqsafxni
CyrenW32/Kryptik.FJU.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HMQG
TrendMicro-HouseCallTROJ_GEN.R002C0PIS21
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Downloader.Win32.Razy.gen
BitDefenderGen:Variant.Fragtor.24968
SUPERAntiSpywareTrojan.Agent/Gen-Fragtor
AvastWin32:CrypterX-gen [Trj]
TencentWin32.Trojan-downloader.Razy.Eibj
Ad-AwareGen:Variant.Fragtor.24968
EmsisoftGen:Variant.Fragtor.24968 (B)
TrendMicroTROJ_GEN.R002C0PIS21
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Generic-S
IkarusTrojan.Win32.Crypt
GDataWin32.Trojan.PSE.1IAKRUN
AviraHEUR/AGEN.1142521
MAXmalware (ai score=88)
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Adware/Win.Generic.R425898
McAfeeArtemis!FCE31F72F5FD
MalwarebytesAdware.DownloadAssistant
APEXMalicious
RisingTrojan.Kryptik!1.AA55 (CLASSIC)
YandexTrojan.Kryptik!HHr+sgCbgx8
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.74148632.susgen
FortinetW32/Kryptik.HLMN!tr
AVGWin32:CrypterX-gen [Trj]
PandaTrj/GdSda.A

How to remove Fragtor.24968 (B)?

Fragtor.24968 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment