Trojan:Win32/Fragtor.ASFA!MTB removal guide

The Trojan:Win32/Fragtor.ASFA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Fragtor.ASFA!MTB virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Trojan:Win32/Fragtor.ASFA!MTB?


File Info:
name: 453B3F10AA2ED097D50A.mlw
path: /opt/CAPEv2/storage/binaries/efd9b8ccbc312a845e226db3f7c716f842934f094a29c886591de7a200a8acb6
crc32: 7F0B1A10
md5: 453b3f10aa2ed097d50a53d3fac6a350
sha1: 9360887688ad2bfe1917bee201d56dc1f5ec1ea3
sha256: efd9b8ccbc312a845e226db3f7c716f842934f094a29c886591de7a200a8acb6
sha512: 8f3df27aac34124cc8f9cbb968c4eab508d8512bf447f8d0241df09ae147964e8153d08e216dcb0a884c0693cb91c81b68352aed619eb7b08c44fc98bc5ec814
ssdeep: 768:RZOOwHEw+Z2P2PP3lLuzZPKqcA8Yjn5Ri:RZOG742PP3lLuBZcsjq
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T17DE2D7997E444CEBE5601738C4E7C7762A7DF051C6234B63F664A7308B737A2219B22E
sha3_384: b39c2a47e0677deca28f68c838b9d81a369ee1068d9b239bb920ed3b056290ba7af9bd59aa4f8b4c54874856f6228528
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-08 23:31:38

Version Info:
0: [No Data]

Trojan:Win32/Fragtor.ASFA!MTB also known as:

Bkav	W32.Common.2555F823
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Fragtor.503084
FireEye	Gen:Variant.Fragtor.503084
Skyhigh	BehavesLike.Win32.Injector.nm
McAfee	GenericRXWN-OT!453B3F10AA2E
Cylance	unsafe
Zillya	Trojan.Injector.Win32.1759751
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 000242cc1 )
Alibaba	Trojan:Win32/Fragtor.9ffc0e8b
K7GW	Trojan ( 005b1a3b1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.GenusT.DVHN
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.ETQB
TrendMicro-HouseCall	TROJ_GEN.R002C0DBH24
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Fragtor.503084
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Agent.kbq
Emsisoft	Gen:Variant.Fragtor.503084 (B)
F-Secure	Trojan.TR/Agent_AGen.kylyi
VIPRE	Gen:Variant.Fragtor.503084
TrendMicro	TROJ_GEN.R002C0DBH24
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
Google	Detected
Avira	TR/Agent_AGen.kylyi
Varist	W32/Agent.IHW.gen!Eldorado
Antiy-AVL	Trojan/Win32.Agent
Microsoft	Trojan:Win32/Fragtor.ASFA!MTB
Arcabit	Trojan.Fragtor.D7AD2C
ViRobot	Trojan.Win.Z.Injector.33071.D
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.1BXSM3T
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R634665
VBA32	BScope.TrojanDropper.Agent
ALYac	Gen:Variant.Fragtor.503084
MAX	malware (ai score=82)
Malwarebytes	Trojan.Injector
Panda	Trj/Chgt.AD
Rising	Trojan.Agent!8.B1E (TFE:5:LMG2ZBEdIXG)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.233084207.susgen
Fortinet	W32/Agent_AGen.DDQ!tr
BitDefenderTheta	Gen:NN.ZedlaF.36802.c46@aijOUPc
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Fragtor.ASFA!MTB?

Trojan:Win32/Fragtor.ASFA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X