Malware

Fragtor.57828 removal instruction

Malware Removal

The Fragtor.57828 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Fragtor.57828 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Fragtor.57828?


File Info:

name: A467420C12250D310FB6.mlw
path: /opt/CAPEv2/storage/binaries/fdc01195b3a1cba67df34096c9d86ec67b36dfdf87c43b03f4e21feb014842ef
crc32: 9390BDA4
md5: a467420c12250d310fb618f39fc5c9cd
sha1: b1a4085d2220a28710498d13ae6aeb6f49b6991e
sha256: fdc01195b3a1cba67df34096c9d86ec67b36dfdf87c43b03f4e21feb014842ef
sha512: 0aa48efd915d6d41215b8d174d7239ab14e3bf7ebfa6afec4b34c2b005b89800e9b60bead26670d94f695298dfdaeaddc3d3f382f8316f740ae812dd50700536
ssdeep: 24576:/77djgtqT5Zyd9ol7fW7w/sSIWUlJ/Bm5hXr:/J5ZISJ4w/NIWUlJ/sZr
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1530523C619E2AA55D68FCEFCD00EFE2976222C15C6ACCF5D824B4C4BA09C74BB1DC915
sha3_384: 2752c8a59348c4f49e44ec53179674af3274a05281c55d869ab8f0d0e00f7358d1105cac724274fdabff50f297b55485
ep_bytes: bb000000005281e80100000081e81ab6
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Fragtor.57828 also known as:

BkavW32.AIDetect.malware2
LionicRiskware.Win32.BitCoinMiner.1!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
MicroWorld-eScanGen:Variant.Fragtor.57828
FireEyeGen:Variant.Fragtor.57828
McAfeeGenericRXAA-FA!A467420C1225
CylanceUnsafe
SangforVirus.Win32.Pacex.Gen
K7AntiVirusTrojan ( 0057ffc71 )
AlibabaMalware:Win32/km_280b22.None
K7GWTrojan ( 005762bf1 )
CrowdStrikewin/malicious_confidence_90% (W)
ArcabitTrojan.Fragtor.DE1E4
BitDefenderThetaGen:NN.ZexaF.34212.XmW@a4AEoOc
CyrenW32/CoinMiner.CQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Pacex.Gen
TrendMicro-HouseCallTROJ_GEN.R002C0RJ221
Paloaltogeneric.ml
ClamAVWin.Trojan.Coinminerx-9889008-0
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.vho
BitDefenderGen:Variant.Fragtor.57828
AvastWin32:CoinminerX-gen [Trj]
TencentTrojan.Win32.Coinminer.yi
Ad-AwareGen:Variant.Fragtor.57828
ComodoPacked.Win32.MUPX.Gen@24tbus
VIPREPacker.NSAnti.Gen (v)
TrendMicroTROJ_GEN.R002C0RJ221
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
SentinelOneStatic AI – Malicious PE
EmsisoftGen:Variant.Fragtor.57828 (B)
IkarusTrojan.Win32.Injector
JiangminRiskTool.BitCoinMiner.vei
AviraHEUR/AGEN.1200419
Antiy-AVLTrojan/Generic.ASBOL.C68E
GridinsoftRansom.Win32.Miner.sa
MicrosoftTrojan:Win32/AgentCrypt.SM!MTB
GDataGen:Variant.Fragtor.57828
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.R370057
VBA32Trojan.Packed
ALYacGen:Variant.Fragtor.57828
MalwarebytesTrojan.Crypt
APEXMalicious
RisingTrojan.Kryptik!1.D238 (CLOUD)
MAXmalware (ai score=83)
MaxSecureTrojan.Malware.74654884.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:CoinminerX-gen [Trj]
Cybereasonmalicious.d2220a
PandaTrj/Genetic.gen

How to remove Fragtor.57828?

Fragtor.57828 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment