Trojan:Win32/Fragtor.ASFA!MTB removal guide

The Trojan:Win32/Fragtor.ASFA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Fragtor.ASFA!MTB virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Fragtor.ASFA!MTB?


File Info:
name: 3A490D58C78B670D8D77.mlw
path: /opt/CAPEv2/storage/binaries/11cfdb3268572b14b24c333399be5afdf3330e218a08defbb1549b3f86e2d71b
crc32: C4FBAC48
md5: 3a490d58c78b670d8d77ac659a7e0027
sha1: 4daffd1ee4e6ab1296963769ec3c6620b0876bfd
sha256: 11cfdb3268572b14b24c333399be5afdf3330e218a08defbb1549b3f86e2d71b
sha512: da14284ab3eb54877fb5c07155ce8e3e57c57b8f6e02855bc91ac19aa0b9787485811c5c6cefa10407c4d42de687837b11d9189602d11da55a56989c2ce6772c
ssdeep: 768:DHsc6S+09PHuZ2PVPP3lLuzZPKq0AwYme5R5:Lsc6S+0lO4VPP3lLuBZ0AXmA
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F1E2D8997E444CEBEA50133984E6C7762A7DF090C7234B62F650B7348B337A5209B66F
sha3_384: 20776ddce0b2c76ea7dce9fea02b42624c595b9dad3182342df030d35f5ca918f080c583b682f1953005006bc79f4681
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 13:15:36

Version Info:
0: [No Data]

Trojan:Win32/Fragtor.ASFA!MTB also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fragtor.503309
FireEye	Generic.mg.3a490d58c78b670d
CAT-QuickHeal	Trojan.IGENERIC
Skyhigh	BehavesLike.Win32.Injector.nm
ALYac	Gen:Variant.Fragtor.503309
Malwarebytes	Trojan.Injector
Sangfor	Trojan.Win32.Agent.Vx2j
K7AntiVirus	Trojan ( 005b1a3e1 )
Alibaba	Trojan:Win32/Fragtor.f3e04776
K7GW	Trojan ( 005b1a3e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Fragtor.D7AE0D
BitDefenderTheta	Gen:NN.ZedlaF.36744.c46@aCrQ3hd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.ETQB
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Fragtor.503309
NANO-Antivirus	Trojan.Win32.AgentAGen.kjcoiq
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.14020122
Emsisoft	Gen:Variant.Fragtor.503309 (B)
F-Secure	Trojan.TR/Agent_AGen.elxew
VIPRE	Gen:Variant.Fragtor.503309
TrendMicro	TROJ_GEN.R03FC0DBJ24
Sophos	Mal/Generic-S
Google	Detected
Avira	TR/Agent_AGen.elxew
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/Fragtor.ASFA!MTB
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.4P1XCS
Varist	W32/Agent.IHW.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.R634543
McAfee	GenericRXWN-OT!3A490D58C78B
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Fsysna
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R03FC0DBJ24
Rising	Trojan.Fragtor!8.13132 (TFE:5:9ntacyLpnqB)
Yandex	Trojan.Agent!VcsDgygZ1tU
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.233177090.susgen
Fortinet	W32/Agent.DDP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Fragtor.ASFA!MTB?

Trojan:Win32/Fragtor.ASFA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X