Malware

How to remove “Fragtor.296231”?

Malware Removal

The Fragtor.296231 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Fragtor.296231 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Fragtor.296231?



File Info:

name: 0EB4CF0101B0269B17A8.mlw
path: /opt/CAPEv2/storage/binaries/e28b4b0752b3331e521adbbf7ae7c0d5a5f7fafb22eaad700e8e16502c567cf9
crc32: 0FD0ECD9
md5: 0eb4cf0101b0269b17a88e13b9cb9689
sha1: 541bdbe6de9251dc5d74b3b157b397af54419664
sha256: e28b4b0752b3331e521adbbf7ae7c0d5a5f7fafb22eaad700e8e16502c567cf9
sha512: cd9ed987662104432655e35a4e43acf217908af8429be444649dce75412a552728d5c2066dcdb216f3270656b4ca861a2482a68666ab761d4a2fbdd76628d833
ssdeep: 196608:J2BKCXOvdGtZz0SEIyV7qvklV4GHCHcid7Q9oGag1nWApPc:JHysUtV1EIUfTHCcoTg1nWAp0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T123A622C55D301D8AD3D11A3AFD5D86143AFE0E4AB028429F86723C33FABF487A15D9A5
sha3_384: a888a7e64e4a890fa360f432a0b6cd1e4e8889107b1e6d5e74c2880d53afa705596ac4a94db60c8a5341052bdf0d7918
ep_bytes: 6801a0f200e801000000c3c37d7c44b6
timestamp: 2020-12-18 07:55:07


Version Info:

CompanyName: Relk Install
FileDescription: Relk Install
FileVersion: 1.1.1.1
InternalName: Relk Install
LegalCopyright: Relk Install(c). Copyrighted  2020
OriginalFilename: RelkI.exe
ProductName: Relk Install
ProductVersion: 1.1.1.1
Translation: 0x0409 0x04b0

Fragtor.296231 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop14.725
MicroWorld-eScanGen:Variant.Fragtor.296231
FireEyeGeneric.mg.0eb4cf0101b0269b
SkyhighBehavesLike.Win32.PUP.tc
ALYacGen:Variant.Fragtor.296231
Cylanceunsafe
VIPREGen:Variant.Fragtor.296231
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan ( 0057589c1 )
BitDefenderGen:Variant.Fragtor.296231
K7GWTrojan ( 0057589c1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenCBL.SJ
APEXMalicious
AlibabaTrojan:Win32/GenCBL.e4b842fb
RisingTrojan.Generic@AI.100 (RDML:t2/4a5KwV0HW/iQdHKVkzQ)
SophosGeneric Reputation PUA (PUA)
F-SecureAdware.ADWARE/Opesup.Gen
ZillyaTrojan.GenCBL.Win32.13732
EmsisoftGen:Variant.Fragtor.296231 (B)
IkarusAdWare.Opesup
MAXmalware (ai score=89)
AviraADWARE/Opesup.Gen
ArcabitTrojan.Fragtor.D48527
GDataGen:Variant.Fragtor.296231
CynetMalicious (score: 99)
McAfeeArtemis!0EB4CF0101B0
DeepInstinctMALICIOUS
MalwarebytesGenCBL.Ransom.FileCryptor.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002H0CET23
SentinelOneStatic AI – Suspicious PE
AVGWin32:AdwareSig [Adw]
AvastWin32:AdwareSig [Adw]
CrowdStrikewin/grayware_confidence_60% (D)

How to remove Fragtor.296231?

Fragtor.296231 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment