Malware

Should I remove “Strictor.105013 (B)”?

Malware Removal

The Strictor.105013 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.105013 (B) virus can do?

  • Executable code extraction
  • Repeatedly searches for a not-found browser, may want to run with startbrowser=1 option
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • A process attempted to delay the analysis task by a long amount of time.

How to determine Strictor.105013 (B)?


File Info:

crc32: 83AAE32D
md5: d7033e1a89a5a8580daa7bb0c166633f
name: D7033E1A89A5A8580DAA7BB0C166633F.mlw
sha1: 4a507993997683bd641110d22282fd4e482d4e43
sha256: 4c139e24898bdb47214b16272ca7d18e4023eadd8bf84797b923367b7393355e
sha512: b0bc88d4f3f1e9433f586ef7c2e0271d0384b87c63906cf76644481d7f0fb50995c9f8dc615c42618ea96cc5b79f744282097ed8cdec84db6bc6256137e00305
ssdeep: 1536:8jhHiTc8Uc3JCgcpKuwhrdFXH7yGfenX1X+TKjOTAOj4DTfeLq4OtVq6iy8xY4/7:8tCTc8l9c+RvfUFX+8MAlfeLaky8F7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2009
InternalName: Flash Install
FileVersion: 1, 23, 2, 5
ProductName: Flash Install
ProductVersion: 1, 23, 2, 5
FileDescription: Flash Install
OriginalFilename: Codec Install
Translation: 0x0419 0x04b0

Strictor.105013 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00143f451 )
Elasticmalicious (high confidence)
DrWebTrojan.Winlock.12994
CynetMalicious (score: 100)
ALYacGen:Variant.Strictor.105013
CylanceUnsafe
ZillyaTrojan.PinkBlocker.Win32.297
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojan:Win32/LockScreen.411bf30c
K7GWTrojan ( 00143f451 )
Cybereasonmalicious.a89a5a
CyrenW32/Risk.YYIB-9084
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/LockScreen.OW
APEXMalicious
AvastWin32:Trojan-gen
KasperskyUDS:Trojan.Win32.Generic
BitDefenderGen:Variant.Strictor.105013
NANO-AntivirusTrojan.Win32.PinkBlocker.dgejoa
MicroWorld-eScanGen:Variant.Strictor.105013
TencentWin32.Trojan.Generic.Wozb
Ad-AwareGen:Variant.Strictor.105013
SophosMal/Generic-S
ComodoMalware@#31pm0omcv5jxq
BitDefenderThetaGen:NN.ZexaF.34690.iq1@aKaelIjk
VIPRETrojan.Win32.Kuluoz.i (v)
McAfee-GW-EditionBehavesLike.Win32.Upatre.cc
FireEyeGeneric.mg.d7033e1a89a5a858
EmsisoftGen:Variant.Strictor.105013 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/PinkBlocker.co
AviraTR/Crypt.ZPACK.Gen
eGambitGeneric.Malware
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Strictor.D19A35
AegisLabTrojan.Win32.Buterat.lDnL
GDataGen:Variant.Strictor.105013
AhnLab-V3Trojan/Win32.PinkBlocker.C79358
Acronissuspicious
McAfeeGenericRXHL-GG!D7033E1A89A5
MAXmalware (ai score=99)
VBA32BScope.Trojan.Bojotuc
MalwarebytesMalware.AI.596253126
PandaTrj/CI.A
RisingTrojan.Crypto!8.364 (CLOUD)
YandexTrojan.GenAsa!WHGU8kG52cE
IkarusTrojan-Dropper.Win32.Blocker
FortinetW32/LockScreen.OW!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Strictor.105013 (B)?

Strictor.105013 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment