Malware

Strictor.105013 removal instruction

Malware Removal

The Strictor.105013 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.105013 virus can do?

  • Executable code extraction
  • Repeatedly searches for a not-found browser, may want to run with startbrowser=1 option
  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • A process attempted to delay the analysis task by a long amount of time.

How to determine Strictor.105013?


File Info:

crc32: 94B6C4A0
md5: 026c14cee76b81c2730d999238b343fc
name: 026C14CEE76B81C2730D999238B343FC.mlw
sha1: 5af9ed754b93669b22a255af89005e2d5ac08bef
sha256: 814bc9f2e945b8691010116990df8eed06c5603f54aaa0a16f9183c46ebd3b54
sha512: c171400bbfe4f39f7942bab9b47815c180825e134385c8d247d0907c2d21f4cbf60585b9b3158dbdff2d5451f6ae759f7826f43504876d2b9c1ccae272fa28af
ssdeep: 3072:PsUwQ6CnRNm8G3RLQjVNSO13kCh2LGFyyaF:oSnRN0hLQrSaUI2LiS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2009
InternalName: Flash Install
FileVersion: 1, 23, 2, 5
ProductName: Flash Install
ProductVersion: 1, 23, 2, 5
FileDescription: Flash Install
OriginalFilename: Codec Install
Translation: 0x0419 0x04b0

Strictor.105013 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00143f451 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop.64733
McAfeeGenericR-KCM!026C14CEE76B
CylanceUnsafe
ZillyaTrojan.LockScreen.Win32.8985
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/PinkBlocker.447a5438
K7GWTrojan ( 00143f451 )
Cybereasonmalicious.ee76b8
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/LockScreen.OW
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Strictor.105013
NANO-AntivirusTrojan.Win32.PinkBlocker.ddfhfc
MicroWorld-eScanGen:Variant.Strictor.105013
TencentWin32.Trojan.Pinkblocker.Dbg
Ad-AwareGen:Variant.Strictor.105013
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.ZPACK.Gen
BitDefenderThetaGen:NN.ZexaF.34628.iq0@aOWXOyak
VIPRETrojan.Win32.Kuluoz.i (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.026c14cee76b81c2
EmsisoftGen:Variant.Strictor.105013 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/PinkBlocker.co
AviraTR/Crypt.ZPACK.Gen
eGambitGeneric.Malware
MicrosoftWorm:Win32/Gamarue!ml
ZoneAlarmTrojan-Ransom.Win32.PinkBlocker.lz
GDataGen:Variant.Strictor.105013
AhnLab-V3Trojan/Win32.PinkBlocker.C79358
Acronissuspicious
MAXmalware (ai score=100)
MalwarebytesMalware.AI.596253126
PandaTrj/CI.A
RisingTrojan.Crypto!8.364 (CLOUD)
YandexTrojan.GenAsa!WHGU8kG52cE
IkarusTrojan-Dropper.Win32.Blocker
FortinetW32/LockScreen.OW!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HgIASOMA

How to remove Strictor.105013?

Strictor.105013 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment