Fragtor.38357 (B) removal tips

The Fragtor.38357 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.38357 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Ukrainian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Creates a copy of itself

How to determine Fragtor.38357 (B)?

File Info:
name: 4443DDD5E80AD1DC6B9A.mlw
path: /opt/CAPEv2/storage/binaries/782f6c962dcfb93d8b25098d0341eaa76924791ed1eb770f8e62df2894b130af
crc32: ACEB7338
md5: 4443ddd5e80ad1dc6b9a3b65d91c7c27
sha1: 0218016fcef0bdf4d1fbf2cfd30560837ab6d6c1
sha256: 782f6c962dcfb93d8b25098d0341eaa76924791ed1eb770f8e62df2894b130af
sha512: 15a490f89673d66e74d197d35cc9734cbfe198228aeb0f5e7aaccf2ed1ec247a3d27173f83538afb412591e625505426ef2a476239737f0e1bf372702eebb476
ssdeep: 12288:pwaN0stsD4Qt2seFtlPGDnJ+f4nq55a/iIVgPBlXh9ifzN/5:pwaSusD4Qt2zFtlPGDJa4nq5qfzN/5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T107352903A90873DDEAB26136CC787EED52C8AD525F26F4C352847DC9093A3C15AFB259
sha3_384: c554d7d7a00ae5801e883ed7a981a1dbb091611c2568a9bdd4f5faddd1e3585425605422a4c8517e3f937e362bb9319f
ep_bytes: 558bec6aff68a8cb4600682ca7460064
timestamp: 2021-11-05 15:10:57

Version Info:
CompanyName: Ariolic Software, Ltd. (www.ariolic.com)
FileDescription: ActiveSMART (R) - Hard drive health and files audit utility
FileVersion: 2.10.2.167
InternalName: asmartCore
LegalCopyright: Copyright (C) 2018 Ariolic Software, Ltd
OriginalFilename: ASmartCore.exe
ProductName: ActiveSMART
ProductVersion: 2.10.2.167
Comments: ab28886af3b6f732ef902aaf66703c121f6899eb
Translation: 0x0409 0x04b0

Fragtor.38357 (B) also known as:

How to remove Fragtor.38357 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.