Strictor.112649 removal

The Strictor.112649 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.112649 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Strictor.112649?


File Info:
name: 663037178A03B8AEEE4C.mlw
path: /opt/CAPEv2/storage/binaries/b4890e2edc4145a792bb5a2c4f01fd9a1449144018df7679cbd719d7f8a9d70c
crc32: 64D106A3
md5: 663037178a03b8aeee4cb00b7038a8f2
sha1: 62a188d2bc506a0680d5211afc144094ebd4783e
sha256: b4890e2edc4145a792bb5a2c4f01fd9a1449144018df7679cbd719d7f8a9d70c
sha512: 5cb97706e806f0df4ba2d36214bd64955db7de57fa9eb61e07f8b2e1c1331097afe831252a6e81e2367c707b2c0c67d1ad0d93b55a384902e2976e31974086a4
ssdeep: 6144:w6jBFomMbvk4YSNP/3f9TXsH3ei0b7nkkkRU:3jBngkWHkkkRU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11C942DC1B100D8D1EC7735F1A73B4D611E622D69A56B781C22B9F71909B2313EEA7A0F
sha3_384: ea810e78142c056976114c556c5aa06d217fbc2ff987989dc046c180ed255a81f526f9ba175e8b6253325d384bfc3159
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-10-18 17:11:43

Version Info:
Translation: 0x0000 0x04b0
FileDescription: StarStableOnlineSC
FileVersion: 1.0.0.0
InternalName: StarStableOnlineSC.exe
LegalCopyright: Copyright ©  2017
OriginalFilename: StarStableOnlineSC.exe
ProductName: StarStableOnlineSC
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Strictor.112649 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Strictor.112649
FireEye	Generic.mg.663037178a03b8ae
McAfee	Artemis!663037178A03
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.8
K7AntiVirus	Password-Stealer ( 00490fc61 )
Alibaba	Trojan:MSIL/ILSpy.f893377f
K7GW	Password-Stealer ( 00490fc61 )
Cybereason	malicious.78a03b
BitDefenderTheta	Gen:NN.ZemsilCO.34294.zq0@a0Aqqdm
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/PSW.Agent.OAZ
TrendMicro-HouseCall	TROJ_GEN.R002H0CHD21
Paloalto	generic.ml
BitDefender	Gen:Variant.Strictor.112649
NANO-Antivirus	Trojan.Win32.MSILPerseus.evqvhq
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Strictor.112649
Sophos	Mal/Generic-S
Comodo	Malware@#1l80imnyd1126
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Strictor.112649 (B)
Ikarus	Virus.PSW.ILSpy
GData	Gen:Variant.Strictor.112649
Avira	HEUR/AGEN.1142335
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Tiggre.C3365524
ALYac	Gen:Variant.Strictor.112649
MAX	malware (ai score=98)
APEX	Malicious
Tencent	Msil.Trojan.Msilperseus.Wnci
Yandex	Trojan.PWS.Agent!NTrm0pLv7Ic
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.OAZ!tr.pws
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Strictor.112649?

Strictor.112649 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X