Malware

Fragtor.25286 (B) information

Malware Removal

The Fragtor.25286 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.25286 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Polish
  • The binary likely contains encrypted or compressed data.
  • Detects Sandboxie through the presence of a library
  • Detects Avast Antivirus through the presence of a library
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Fragtor.25286 (B)?


File Info:

crc32: 0C6E389F
md5: e603f5c5856006d5773547542bff7574
name: E603F5C5856006D5773547542BFF7574.mlw
sha1: 32fd7a3e52b6ac46ad4af7f1e7d180fff077a401
sha256: 54587b22ebb131021455bc90d81a4e191b3037603313e619156019c99223b754
sha512: 7825e7e6c8a8f37727e046fec55a662d4222eb23451fe73aa52d098d2d8a1f7938a5c4f3e09ee4956ec42c4ea8cb97bcabec5eb8044a4cf30dee1a5ef78f6691
ssdeep: 6144:pJuIzfjIal2Ct/rapk0+adtdR5ABKRv3F:pJuIjjIal7/kxtdR5xvV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x1209 0x04b8

Fragtor.25286 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0058800f1 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.15253
CynetMalicious (score: 100)
CAT-QuickHealRansom.Stop.Z5
ALYacGen:Variant.Fragtor.25286
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0058800f1 )
Cybereasonmalicious.e52b6a
CyrenW32/Kryptik.FJN.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HMPO
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Packed.Generic-9896517-0
KasperskyHEUR:Exploit.Win32.Shellcode.gen
BitDefenderGen:Variant.Fragtor.25286
MicroWorld-eScanGen:Variant.Fragtor.25286
Ad-AwareGen:Variant.Fragtor.25286
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34170.su0@aG9UrMoO
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.dm
FireEyeGeneric.mg.e603f5c5856006d5
EmsisoftGen:Variant.Fragtor.25286 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.Nekark.dggdr
eGambitUnsafe.AI_Score_95%
MicrosoftRansom:Win32/StopCrypt.MIK!MTB
ZoneAlarmHEUR:Exploit.Win32.Shellcode.gen
GDataWin32.Trojan.PSE.4DHQ2P
AhnLab-V3Downloader/Win.BeamWinHTTP.R442678
Acronissuspicious
McAfeePacked-GDT!E603F5C58560
MAXmalware (ai score=87)
VBA32Malware-Cryptor.Azorult.gen
MalwarebytesTrojan.MalPack.GS
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D9C0 (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/GenKryptik.FLGE!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Fragtor.25286 (B)?

Fragtor.25286 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment