Malware

Fragtor.49451 removal guide

Malware Removal

The Fragtor.49451 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.49451 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Guard pages use detected – possible anti-debugging.
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the BlackCat malware family
  • Anomalous binary characteristics

How to determine Fragtor.49451?


File Info:

name: 70B8BC74F381C9D7D101.mlw
path: /opt/CAPEv2/storage/binaries/4e18f9293a6a72d5d42dad179b532407f45663098f959ea552ae43dbb9725cbf
crc32: 0E4AF4FB
md5: 70b8bc74f381c9d7d1016006c3950f85
sha1: 655c2567650d2c109fab443de4b737294994f1fd
sha256: 4e18f9293a6a72d5d42dad179b532407f45663098f959ea552ae43dbb9725cbf
sha512: 7ec1df31297f4458adf1a4245fa6a902919a144758d2da9187e25472e53f8db7047a8a7487fdaa5d466f3b2dd2edbbe8e2daca3d9b36ff70608af5a8acf47ef3
ssdeep: 49152:4dwE1vCCeShiBHJFIPiEPE3bvk6Ca89388YhwjfJNH/RgaJ2wtb:WwE1253IPiYE3bnCa8Hzj/vwwtb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18EE5AF4EF99392EACD571A70389EB33AD6304918011D9EA3E7FC5E24BE3E71059C861D
sha3_384: e7fb9d5cbe25f25474d721e354d383a922af7f7c1f6275e506be94bfb6e780dabe7893a753decfd2a0221160ab9636f7
ep_bytes: 83ec0cc70538f56e0001000000e83e04
timestamp: 2021-12-21 21:02:02

Version Info:

0: [No Data]

Fragtor.49451 also known as:

LionicTrojan.Win32.Generic.j!c
MicroWorld-eScanGen:Variant.Fragtor.49451
CAT-QuickHealRansom.Blackcat
ALYacGen:Variant.Fragtor.49451
MalwarebytesMalware.AI.3797928145
SangforRansom.Win32.Generic.ky
K7AntiVirusTrojan ( 0058bae31 )
AlibabaRansom:Win32/BlackCat.8cc4684d
K7GWTrojan ( 0058bae31 )
Cybereasonmalicious.7650d2
ArcabitTrojan.Fragtor.DC12B
BitDefenderThetaGen:NN.ZexaCO.34160.7IW@aCRnBMf
CyrenW32/Filecoder.CP.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Filecoder.OJP
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Ransomware.BlackCat-9934796-0
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderGen:Variant.Fragtor.49451
AvastWin32:RansomX-gen [Ransom]
Ad-AwareGen:Variant.Fragtor.49451
TACHYONRansom/W32.Agent.3073536.B
EmsisoftGen:Variant.Fragtor.49451 (B)
DrWebTrojan.Encoder.34835
ZillyaTrojan.Filecoder.Win32.21394
TrendMicroRansom.Win32.BLACKCAT.YXBL1Z
FireEyeGeneric.mg.70b8bc74f381c9d7
SophosMal/Generic-S
IkarusTrojan-Ransom.FileCrypter
JiangminTrojan.Generic.helpw
WebrootW32.Malware.Gen
AviraTR/FileCoder.lnhyx
Antiy-AVLTrojan/Generic.ASMalwS.34F54F6
GridinsoftRansom.Win32.AI.sa
MicrosoftRansom:Win32/BlackCat.MK!MTB
ViRobotTrojan.Win32.Z.Fragtor.3073536.B
GDataGen:Variant.Fragtor.49451
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4834322
McAfeeGenericRXRG-IL!70B8BC74F381
MAXmalware (ai score=85)
VBA32BScope.TrojanRansom.Agent
CylanceUnsafe
TrendMicro-HouseCallRansom.Win32.BLACKCAT.YXBL1Z
TencentMalware.Win32.Gencirc.10cfb955
MaxSecureTrojan.Malware.10307848.susgen
FortinetW32/Filecoder.OJP!tr.ransom
AVGWin32:RansomX-gen [Ransom]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Fragtor.49451?

Fragtor.49451 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment