About “Fragtor.30866” infection

The Fragtor.30866 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.30866 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Scheduled file move on reboot detected
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Fragtor.30866?

File Info:
name: AA465E234320C06784FE.mlw
path: /opt/CAPEv2/storage/binaries/6f77e78b311193dac61b62dff2628a51702a1793a19c9546e9a48aef5b452604
crc32: 915535FD
md5: aa465e234320c06784fe70ded58dd0f7
sha1: 9084d9685f3e6f7747fbb8e11b201e2455aacae8
sha256: 6f77e78b311193dac61b62dff2628a51702a1793a19c9546e9a48aef5b452604
sha512: 4439fbc39208bde9682ed579795ff8c778ad87fa48c3910855059424e55760bbb98e0ae37b0a950a76f3a83818fec7623bafd94c920412a7b6ba099239ec0aef
ssdeep: 49152:Wjyxr3FvzEqcEmp70aOOIsExxTl4Izv+C3fAovdYu:oURvzEqFmCfOIVbpPA7u
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T129B53311F3D4EB21CAEE8AF511BA3D1B952DF274567A38C31DD18C98EED15E0E125231
sha3_384: 72334c7766d3a40b19e810420fcbb7d1ecdc412453c33b49617704abb0dad13a6b7509fa6a4e1eddff3c6290a1e5fc3e
ep_bytes: b9000000005201fe09f681eec1c50237
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Fragtor.30866 also known as:

How to remove Fragtor.30866?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.