Fragtor.327453 removal tips

The Fragtor.327453 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.327453 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Fragtor.327453?


File Info:
name: EBC66DB4DD04CA972DE9.mlw
path: /opt/CAPEv2/storage/binaries/7bd2c97ac5027c360011dc5aa8f2371cd934f73e885e41f7e80152332b3af1db
crc32: A1235704
md5: ebc66db4dd04ca972de9d4a3a59552d2
sha1: ef6f5acfe78a50fd5fa61a9f8c3b04e78733d9a3
sha256: 7bd2c97ac5027c360011dc5aa8f2371cd934f73e885e41f7e80152332b3af1db
sha512: 4fa37008591a811718b0a34569a9aff4c45939b3a9da9407f9484061681657d68d554485d5400a2e9aed3075359cdd027b6ffe5d62ba3865a50b167bb0fdebae
ssdeep: 192:zfxSa/xpUxSF6N1T6oZqWqccMRWxkLTJ+g0cVp2u8H6E6agHba:dSHiC1xUWqccMVLTJaw8HPQO
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T17A8229A5AF4700FBD61309B843E7DA7FDA783901D0218D28F758823EA9334B5CA5B711
sha3_384: 79936e3925730ddb23e4c6046f6f7c8d0c2294a4b3c81aee0493565f829e04c1f8c905e03d4f8291f46381c38b638fc9
ep_bytes: 83ec2c895c24208b5c2434897424248b
timestamp: 1970-01-01 00:00:00

Version Info:
Translation: 0x0409 0x04b0
CompanyName: Wincor Nixdorf
FileDescription: CNG Device Driver
FileVersion: 111021 1426
InternalName: CSCWCNG.DLL
LegalCopyright: Copyright © Wincor Nixdorf 2019
OriginalFilename: CSCWCNG.DLL
ProductName: 
ProductVersion:

Fragtor.327453 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.ATMDispCash.7!c
Elastic	malicious (high confidence)
Skyhigh	RDN/PWS-Banker
McAfee	RDN/PWS-Banker
VIPRE	Gen:Variant.Fragtor.327453
Sangfor	Banker.Win32.Atm.Vrsc
K7AntiVirus	Trojan ( 0054b3ec1 )
BitDefender	Gen:Variant.Fragtor.327453
K7GW	Trojan ( 0054b3ec1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.ATMDispCash.Q
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ATM.P
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Banker.Win32.ATM.gen
Alibaba	TrojanBanker:Win32/ATMPOT.30679055
NANO-Antivirus	Trojan.Win32.ATMDispCash.fphnwy
MicroWorld-eScan	Gen:Variant.Fragtor.327453
Avast	Win32:Malware-gen
Rising	Trojan.ATM!8.4A48 (CLOUD)
Emsisoft	Gen:Variant.Fragtor.327453 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.ATMDispCash.16
Zillya	Trojan.Agentb.Win32.22580
TrendMicro	Trojan.Win32.ATMPOT.A
FireEye	Generic.mg.ebc66db4dd04ca97
Sophos	Mal/Generic-S
Ikarus	Trojan.Crypt
GData	Gen:Variant.Fragtor.327453
Jiangmin	Trojan.Banker.ATM.a
Google	Detected
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=94)
Antiy-AVL	Trojan/Win32.ATM
Kingsoft	Win32.Trojan-Banker.ATM.gen
Xcitium	Malware@#37xdzypncj0kv
Arcabit	Trojan.Fragtor.D4FF1D
ZoneAlarm	HEUR:Trojan-Banker.Win32.ATM.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Varist	W32/ABTrojan.FWUZ-6142
AhnLab-V3	Trojan/Win32.Banker.C4102005
VBA32	BScope.Trojan.ATMDispCash
ALYac	Trojan.ATMDispCash
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.ATMPOT.A
Tencent	Win32.Trojan-Banker.Atm.Ytjl
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.74355382.susgen
Fortinet	W32/ATM.P!tr
BitDefenderTheta	Gen:NN.ZedlaF.36680.bW8@aONvSAC
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Fragtor.327453?

Fragtor.327453 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X