What is “Fragtor.28478”?

The Fragtor.28478 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.28478 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Fragtor.28478?

File Info:
name: C591544DE8E73B34D012.mlw
path: /opt/CAPEv2/storage/binaries/b463cd1b83e5a78597f6d93e20e73c40efccfb806ecf9fbae0065052945d051b
crc32: A9659184
md5: c591544de8e73b34d012dbe5ec836ca0
sha1: 31ceaf88a9bfc523868f402fde6fe084069ccca0
sha256: b463cd1b83e5a78597f6d93e20e73c40efccfb806ecf9fbae0065052945d051b
sha512: 9fb442c733f812ff14324a27dd5f75d4766f030e01920abe1ffc355dd1d2be2cbb97427e97459a32380a0fd3bf6dbcfa6a205d779853c2724d02cd1c644e40ed
ssdeep: 12288:+HdTyucP4SQfdyed90fbM+/e1MR3UsuHqRFV5ZACHmBKM+68jK9Hs2KVhE:iGucARkBMge1YUsucVDmEVjd1V
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1220533E7157CC312DAEF1A3470ABE04A318C261644EA5E5FBDC3C5536F8076985AD1CB
sha3_384: 7ef7c58d0acb25cc280336b50a506c16fd82204971167aff2d0747ff368e365f70b8cca4c85b697cc592442397755fea
ep_bytes: b80000000053465981c674f7639281ee
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Fragtor.28478 also known as:

How to remove Fragtor.28478?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.