About “Fragtor.524990” infection

The Fragtor.524990 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.524990 virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• CAPE detected the embedded win api malware family
• Attempts to modify proxy settings
• Yara detections observed in process dumps, payloads or dropped files

How to determine Fragtor.524990?

File Info:
name: A252BF4B39E8F390C35A.mlw
path: /opt/CAPEv2/storage/binaries/3006470208641ac5995735aef4bb7ec76da9f4d13ba427a9c32c9eefbee4525e
crc32: DDC1494C
md5: a252bf4b39e8f390c35a58e82de3f349
sha1: c22c0626f90bef4c43d470a98a7319d1f8910395
sha256: 3006470208641ac5995735aef4bb7ec76da9f4d13ba427a9c32c9eefbee4525e
sha512: fcb198d391e27b2b2ec21b7b64c20bd40ea929c3a86de53b0cac36a83523bc0730244638a7cab035d96b61f9f8a4d6b216d9089ca30d5cc51c61bb23d0416622
ssdeep: 384:tJYXyluv8pC5bXrL4lqn65+h7iQroC9CE5CyjbkmZpyhw:TYikv8p2rL4i6sh7iQroCHFbk26w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T181B2F6B0BFC45964E2A351F1DCF7EA516017BFA96466860C70EE760688B378274A2D0F
sha3_384: ade7d86992e6da759d714249524f69d5b4756efddd4bf8b7a506f82df1bd3fd4c74dab77bfd54caf8c30afae2e7ad901
ep_bytes: 60be008040008dbe0090ffff5783cdff
timestamp: 2013-11-21 06:23:38

Version Info:
0: [No Data]

Fragtor.524990 also known as:

How to remove Fragtor.524990?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.