Categories: Malware

Fragtor.88480 (B) removal

The Fragtor.88480 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Fragtor.88480 (B) virus can do?

At least one process apparently crashed during execution
Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid

How to determine Fragtor.88480 (B)?


File Info:
name: E9BF7A760553855F0A51.mlwpath: /opt/CAPEv2/storage/binaries/040d6bf2263ecabcf0593742ea6fdb3461997ff101061332fd5ec6b9feae66d7crc32: 45C2796Amd5: e9bf7a760553855f0a51dbb8c0d3859csha1: 3b58b6717c3c4eaa60b238b26100d32aba467332sha256: 040d6bf2263ecabcf0593742ea6fdb3461997ff101061332fd5ec6b9feae66d7sha512: 888c6d450049f004268744ab4798dada0d40b01740eb8f41bbcde9411f446d15b547aa900f8e980663a7d46e927e1820591aeb5611efe3cbe7bfa2f06b212b74ssdeep: 12288:fgudMFIV5yvRdKYRv5qA5TzeFPUPxqs8jpf3jRTJqaCvLN5vn1aXsnn23sGKc87e:3yFI+vR8YR7VqF3jF3jl87+skspc8xFFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BDF423AB6343A092C07809756C176E4D2760B812193DBB474F393F1DAEAAB7B7DD102Csha3_384: 1667323a6f190620d4662a2bf45c24b1956881e1a896d3b850c196800bc38fcac56a62792e0d852555459fc36b70ac7fep_bytes: 68332363c1e8736a0a0099e101908001timestamp: 2021-05-11 01:53:55
Version Info:
FileVersion: 1.0.0.0FileDescription: 2.2.2.2ProductName: 1.0.0.1ProductVersion: 1.0.0.0CompanyName: by阿三LegalCopyright: 印度阿三Comments: 4.4.4.4Translation: 0x0804 0x04b0

Fragtor.88480 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.88480
FireEye	Generic.mg.e9bf7a760553855f
CAT-QuickHeal	Trojan.GenericRI.S28110539
ALYac	Gen:Variant.Fragtor.88480
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 004b942f1 )
K7GW	Adware ( 004b942f1 )
CrowdStrike	win/malicious_confidence_90% (D)
BitDefenderTheta	Gen:NN.ZexaF.34742.TC0@a0LRnTib
Cyren	W32/Trojan.JO.gen!Eldorado
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/GenKryptik.DIEQ
APEX	Malicious
ClamAV	Win.Malware.FlyAgent-9949842-1
Kaspersky	Trojan.Win32.CMY3U.eve
BitDefender	Gen:Variant.Fragtor.88480
Tencent	Trojan-Spy.Win32.Keylogger.fa
Ad-Aware	Gen:Variant.Fragtor.88480
TACHYON	Trojan/W32.CMY3U.745472
Emsisoft	Gen:Variant.Fragtor.88480 (B)
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
Zillya	Trojan.Keylogger.Win32.1
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Krypt
GData	Gen:Variant.Fragtor.88480
Jiangmin	Trojan.CMY3U.oh
Arcabit	Trojan.Fragtor.D159A0
ZoneAlarm	Trojan.Win32.CMY3U.eve
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.SFLMYVdC.R497028
McAfee	GenericRXAA-AA!E9BF7A760553
MAX	malware (ai score=81)
Malwarebytes	Spyware.KeyLogger
Rising	Trojan.Generic@AI.100 (RDML:UKZ88zeBCRDfpab+ej7BiA)
Yandex	TrojanSpy.KeyLogger!hmBjlV8Vw5c
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/KeyLogger.NUK!tr
AVG	Win32:SpywareX-gen [Trj]
Cybereason	malicious.605538
Avast	Win32:SpywareX-gen [Trj]