Malware

Fragtor.46059 removal instruction

Malware Removal

The Fragtor.46059 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.46059 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Fragtor.46059?


File Info:

name: C57A647C10BD969AD755.mlw
path: /opt/CAPEv2/storage/binaries/ee3595d467fbc4c68f74f053dd707cfceb59bbf30c978dfcac473a3e84ec9920
crc32: 55C033D3
md5: c57a647c10bd969ad755762f7816e200
sha1: 566ba5b83dda326def52b3574b6b3cf7435134ac
sha256: ee3595d467fbc4c68f74f053dd707cfceb59bbf30c978dfcac473a3e84ec9920
sha512: 30b8944e22ae00c641d2611288bcc3859908565ae10ac68e223ab9df713d85e01b82d7dea0454729823e5a5e722ea3639f5e7b9186c98910726ad5dcf5d09085
ssdeep: 3072:JXF+Ym1SawndEenBu1IyUG/zOFkutaPuAf6rxfyYpeaXZcphAcVk:9AYm4HdEenBuGyUG/zOFkHPueaXy3x
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15F146E41EBA05616E404A8F12553D77C4001EB7E7B315AEA33F0FE86A1706AF76E4F4A
sha3_384: 2d95b1eed7a0efaaeb0d32581f3da93e6fcb4b9d94900c93c66d8f60dbb0ef4b86d3876e1d0740e5b07ba47b5fcae68a
ep_bytes: 6824704100e8f0ffffff000000000000
timestamp: 2014-11-27 10:07:13

Version Info:

Translation: 0x0409 0x04b0
ProductName: Opvar5
FileVersion: 1.00
ProductVersion: 1.00
InternalName: HOLDERNES
OriginalFilename: HOLDERNES.exe

Fragtor.46059 also known as:

LionicTrojan.Win32.Fragtor.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fragtor.46059
FireEyeGeneric.mg.c57a647c10bd969a
ALYacGen:Variant.Fragtor.46059
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Variant.Fragtor.46059
K7GWTrojan ( 0058b4ab1 )
K7AntiVirusTrojan ( 0058b4ab1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FOFZ
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan-Downloader.Win32.GuLoader.zp
Ad-AwareGen:Variant.Fragtor.46059
EmsisoftGen:Variant.Fragtor.46059 (B)
ZillyaTrojan.GenKryptik.Win32.117013
TrendMicroTROJ_GEN.R049C0WLD21
McAfee-GW-EditionBehavesLike.Win32.Swisyn.ch
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1109931
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Fragtor.46059
CynetMalicious (score: 100)
McAfeeGuLoader-FDGA!C57A647C10BD
VBA32BScope.TrojanDownloader.GuLoader
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R049C0WLD21
TencentWin32.Trojan-downloader.Guloader.Sxxy
YandexTrojan.GenKryptik!/MvbFDTI6D4
MAXmalware (ai score=85)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FOFZ!tr
BitDefenderThetaGen:NN.ZevbaF.34114.mm0@aqnJRRai
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Fragtor.46059?

Fragtor.46059 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment