Fragtor.503398 removal guide

The Fragtor.503398 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Fragtor.503398 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Fragtor.503398?


File Info:
name: 1B610E569BF875B4129C.mlw
path: /opt/CAPEv2/storage/binaries/77fb101e824ad39469814e7206dff94e5d4eb0c28fe8967d41e8284f25422488
crc32: 641092B2
md5: 1b610e569bf875b4129cc9c1bd8b122b
sha1: 352a44080d4eccc5f4d8630cb1a19b382b8e8c4e
sha256: 77fb101e824ad39469814e7206dff94e5d4eb0c28fe8967d41e8284f25422488
sha512: 471f0821ed207f3049358d7650b95e5e6556530d6225c0c0ce85f91a26883a4d120110eb6e818f1cd6b98f2f9ece91813e38dd0937ce1d436d2c2c060488ca2e
ssdeep: 384:RsV2VtXAiJfTJn2Tu+tCl8qUmPeuaBU3losjuzZ6UwYRGZqY7PLksnXMkXGZcwu/:SVFiNNE1t0lPP3lLuzZPKqwbGewuIoRn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T121E2C8997E444CEBD950173994E7C67A2B7CF180C6234B62FA50A7308F737A5309B26E
sha3_384: b0d3df5352665bce9ecd608f26bd1a7accea280bb27e383e642577a9d56ecf592cc956ce9520c8ff00ba9175a8f333dc
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 03:20:51

Version Info:
0: [No Data]

Fragtor.503398 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.503398
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!1B610E569BF8
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.41efeadb
K7GW	Trojan ( 005b1a3e1 )
K7AntiVirus	Trojan ( 005b1a3e1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.DDU
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Fragtor.503398
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Dropper.Pqil
Emsisoft	Gen:Variant.Fragtor.503398 (B)
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Gen:Variant.Fragtor.503398
FireEye	Generic.mg.1b610e569bf875b4
Sophos	Mal/Generic-S
GData	Win32.Trojan.Agent.WSRPJ9
Avira	TR/Dropper.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Fragtor.D7AE66
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.Generic.R634606
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aySTAte
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (CLOUD)
Fortinet	W32/Agent.DDP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Fragtor.503398?

Fragtor.503398 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X