Fragtor.30289 malicious file

The Fragtor.30289 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.30289 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid

How to determine Fragtor.30289?


File Info:
name: 64BED6ABAF6A6F136CE2.mlw
path: /opt/CAPEv2/storage/binaries/cacb2fbad0bc14c6abe332d087838a03353328e9ead26ac7ecb13f2a02be1c0c
crc32: 5AB1498F
md5: 64bed6abaf6a6f136ce2cbf391f0bc77
sha1: 390cf085d1c0265eb94180519caae957d73ed2ea
sha256: cacb2fbad0bc14c6abe332d087838a03353328e9ead26ac7ecb13f2a02be1c0c
sha512: 130642efdbe7bc2256715121ee4cd5599c9416f930e55871ffde0832c19e7e437fb4a483e706432954ccc57a3270e8081f1dbec436182fd4672b08724a09b1bf
ssdeep: 98304:wldVBgWbpWrvOrh6vNFCSvXmqTzXekQIwREwrpFQsYIDvhPtFHoeH+bXCHE49:wXVu8WbOrh61TOqHekQLEwrMFuJ4W7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1476633331264210BC5E9CC3AC63FBDA5B0F6527BCB82A87975E79DE125164D2E312D23
sha3_384: 5b078a74b8112167c819442b61c0a9580b0e288e87927ac9aa92b08341a2ad1fdbe3615a20c3ad0c252d469fd512b586
ep_bytes: 6850be8936e862694700d1c9f581fc37
timestamp: 2019-02-27 23:56:32

Version Info:
0: [No Data]

Fragtor.30289 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.30289
FireEye	Generic.mg.64bed6abaf6a6f13
McAfee	Artemis!64BED6ABAF6A
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
BitDefender	Gen:Variant.Fragtor.30289
Avast	Win32:Malware-gen
Rising	Trojan.Fuery!8.EAFB (CLOUD)
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Fragtor.30289 (B)
Ikarus	Trojan.Win32.VMProtect
Antiy-AVL	Trojan/Generic.ASMalwS.2AC45FF
Microsoft	Trojan:Win32/Occamy.CCA
GData	Gen:Variant.Fragtor.30289
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Generic.C3044757
ALYac	Gen:Variant.Fragtor.30289
APEX	Malicious
MAX	malware (ai score=100)
MaxSecure	Trojan.Malware.74306886.susgen
AVG	Win32:Malware-gen

How to remove Fragtor.30289?

Fragtor.30289 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X