Categories: Malware

Fragtor.3680 malicious file

The Fragtor.3680 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.3680 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Fragtor.3680?


File Info:

name: F43E2D8C02E165FB655A.mlwpath: /opt/CAPEv2/storage/binaries/c056998ceba49f6f4089f7979bf258ec2550f8de2ff55cb7bb21ecc9b9bf613ccrc32: 12C11037md5: f43e2d8c02e165fb655a84d92a5c91d6sha1: b3fa9e8e624247e496df04052c0fc8f1e6bfa59bsha256: c056998ceba49f6f4089f7979bf258ec2550f8de2ff55cb7bb21ecc9b9bf613csha512: 3841c24177b346ff42be07e7f093a2cce742c05939e519d6dbaac3685f79d41acf98acb760cbb083ad3eb6272340ae4b45929374696137b4418eec9b2eb6771essdeep: 49152:6uBlrvCxkPhIasl7YdRvLPbl2KZeUhZ6zQwjOx/x:6KryGaaRTEKeUhZqQX/xtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EB958B2279C0C579D71223319D2CF62496EDB9722A70A817F9CC2B1D6BF15C3A31279Bsha3_384: 53f639e29c408ed742436a3b11bed84d6e20492679d677dd14caf10ce96c2d38ee3adf292327e2951ef4d976de614439ep_bytes: e83e710000e989feffff8bff558bec56timestamp: 2017-07-03 21:53:54

Version Info:

0: [No Data]

Fragtor.3680 also known as:

Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Generic.4!c
MicroWorld-eScan Gen:Variant.Fragtor.3680
FireEye Generic.mg.f43e2d8c02e165fb
ALYac Gen:Variant.Fragtor.3680
Cylance Unsafe
Cybereason malicious.c02e16
Arcabit Trojan.Fragtor.DE60
BitDefenderTheta Gen:NN.ZexaCO.34294.1vW@aSxX3nli
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Adware.Zdengo.BRD
TrendMicro-HouseCall TROJ_GEN.R002H0CKN21
BitDefender Gen:Variant.Fragtor.3680
Ad-Aware Gen:Variant.Fragtor.3680
Sophos Generic PUA LD (PUA)
Comodo ApplicUnwnt@#1mt0i45btw4pt
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.PUP.th
SentinelOne Static AI – Suspicious PE
Emsisoft Gen:Variant.Fragtor.3680 (B)
APEX Malicious
MaxSecure Trojan.Malware.300983.susgen
Avira HEUR/AGEN.1117306
Gridinsoft Ransom.Win32.Occamy.sa
Microsoft Trojan:Win32/Occamy.CC0
GData Gen:Variant.Fragtor.3680
Cynet Malicious (score: 100)
McAfee Artemis!F43E2D8C02E1
MAX malware (ai score=99)
VBA32 BScope.Adware.Wajam
Malwarebytes Adware.Wajam
Rising Trojan.Generic@ML.83 (RDMK:dSc9jHgft71hey+iGjRxzg)
Yandex PUA.Zdengo!YvSH3b7piFI
eGambit Unsafe.AI_Score_80%
Fortinet W32/Generic_PUA_LD.AWJ
Webroot W32.Adware.Gen
Panda Trj/GdSda.A
CrowdStrike win/malicious_confidence_100% (D)

How to remove Fragtor.3680?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 months ago