Should I remove “Trojan:Win32/Fragtor.EL!MTB”?

The Trojan:Win32/Fragtor.EL!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Fragtor.EL!MTB virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Network anomalies occured during the analysis.
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Authenticode signature is invalid
• A ping command was executed with the -n argument possibly to delay analysis
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• Deletes executed files from disk
• Uses suspicious command line tools or Windows utilities

How to determine Trojan:Win32/Fragtor.EL!MTB?

File Info:
name: 7CE1E6A07023970CE9F9.mlw
path: /opt/CAPEv2/storage/binaries/2bf308aa477df17d1990fa05b70a72d6bd31c3d0de4f0677983393200aba689e
crc32: 13DA873C
md5: 7ce1e6a07023970ce9f9cb84702f416c
sha1: 2531c994179256c03fef5320392a55a06905a536
sha256: 2bf308aa477df17d1990fa05b70a72d6bd31c3d0de4f0677983393200aba689e
sha512: eda5a0bf1665ff9418184a88deddeed91011a8fef8ae4ff947b7ba1354577c006842ab434f839472c55edd97f7e4ef0b1430ce937948d9321289c3b206473539
ssdeep: 384:0W5umKUx9+09RXjXz7XjCWwqK8Wzz8WW5bIwHT7uhE7DETnY5BmPP1F3m:L5uEbF9xjXvKBBW5bT7kmETgIPNF3m
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T174C28EB3B6F0CC62DB94C1BD11B31DB485BAF4342D358693A724E5372965074F6AA0CB
sha3_384: e4decbbe79fe04cd20945bc3408cebb97d788e0caf060ed60387412def61d5f15060e9f9dad748a265b3206c22f3a0c2
ep_bytes: e8b1020000e974feffff558becff7508
timestamp: 2020-12-13 23:46:04

Version Info:
0: [No Data]

Trojan:Win32/Fragtor.EL!MTB also known as:

How to remove Trojan:Win32/Fragtor.EL!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.