Categories: Malware

Fragtor.386429 removal instruction

The Fragtor.386429 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.386429 virus can do?

Unconventionial binary language: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Fragtor.386429?


File Info:
name: C9DC399500C4B8BBF015.mlwpath: /opt/CAPEv2/storage/binaries/de9954a4f8bbf0c50edbf5056e4b40716b6a0e01ab883a6ed1ecbebf88fd61e9crc32: 780DB2A7md5: c9dc399500c4b8bbf0153e08d3f2c912sha1: 30b6e842d62e15fb25407180d9489cd4dc616cd4sha256: de9954a4f8bbf0c50edbf5056e4b40716b6a0e01ab883a6ed1ecbebf88fd61e9sha512: ed975709f039e565f018d3a67fabfca98d815907e52c445e6c49c44fecb72549edcbd1c162549d323e7a9fbd6caeb7a17ddef75ae117a179dd4643850eef9416ssdeep: 196608:EOOFKFtt3JEzJsXADNkCtMxzJfRp0DT9xL:Ex8tqmwDN+xTYtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1287633B362651082D5E1CC3A902B7EE4B1F703D98A01DCB95997BDC12E358EBE727643sha3_384: ce539818e62460f6cc1ddc28139c020f39532c9aa2838c57d46e57548b4d17f7cb915616c4f98c71369a6eec7a9efec4ep_bytes: e83b7ccfff660fb60ef6d28a5602f93btimestamp: 1971-10-21 09:26:40
Version Info:
FileDescription: zxbg.exeFileVersion: 2.0.18.0ProductVersion: 2.0.18.0LegalCopyright: 版权所有 国家信息安全工程技术研究中心 保留所有权利OriginalFilename: zxbg.exeProductName: 在线变更InternalName: zxbg.exeTranslation: 0x0804 0x04b0

Fragtor.386429 also known as:

Bkav	W32.Common.2E84D105
CyrenCloud	Risk/WIN_PE.de9954a4!Threatlookup
Lionic	Trojan.Win32.VMProtect.4!c
MicroWorld-eScan	Gen:Variant.Fragtor.386429
FireEye	Generic.mg.c9dc399500c4b8bb
Skyhigh	BehavesLike.Win32.Generic.wc
McAfee	GenericRXAA-AA!C9DC399500C4
Malwarebytes	Generic.Malware/Suspicious
Zillya	Trojan.VMProtect.Win32.86335
Sangfor	Trojan.Win32.Fragtor.Vm93
K7AntiVirus	Trojan ( 0059f3ca1 )
K7GW	Trojan ( 0059f3ca1 )
Arcabit	Trojan.Fragtor.D5E57D
VirIT	Trojan.Win32.Genus.UKA
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.VMProtect.AU suspicious
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Fragtor.386429
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.Fragtor.386429
Emsisoft	Gen:Variant.Fragtor.386429 (B)
F-Secure	Trojan.TR/Redcap.ftwlx
VIPRE	Gen:Variant.Fragtor.386429
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Avira	TR/Redcap.ftwlx
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.Agent
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Fragtor.386429
BitDefenderTheta	Gen:NN.ZexaF.36608.@Z0@aaia51mi
ALYac	Gen:Variant.Fragtor.386429
VBA32	TScope.Malware-Cryptor.SB
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09JF23
Yandex	Riskware.VMProtect!aOD4kwqJ75g
Ikarus	PUA.VMProtect
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Application
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)