Categories: Malware

About “Strictor.116666 (B)” infection

The Strictor.116666 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.116666 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Sniffs keystrokes
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

How to determine Strictor.116666 (B)?


File Info:
name: F1FFF814467483B4A3EA.mlwpath: /opt/CAPEv2/storage/binaries/b12e804843353ea6fa509b4541541defadb91d28d613a588c3a1458bc91d54d4crc32: 4FA9B693md5: f1fff814467483b4a3ea07dad0c8654dsha1: 9c13ae2f281a8a14fa11e1fde6ed9fa1ac621d96sha256: b12e804843353ea6fa509b4541541defadb91d28d613a588c3a1458bc91d54d4sha512: 250cef429f5f863ca56f02a3add3a650468e60d03595666f30e64684d5e35e959ee79291c6b27622850d5c377df4e38ae7c0956c3619f2f0e73648baf057b838ssdeep: 98304:Hc/Te8kgMYsdMwcWFRY1pqlga8gOiQOjlfZgEYhI/pcDN0NdpRzIE02:8/68ceA98CjjrgNhvN2/zIotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D44601819786C076CDA34C306095634AEF7AED187D25FDC39D88B48DCA774A0E67F286sha3_384: e074f6128ca4dfe72b555ba3ea1029221404180f2fc9258b73b0c3cd19a30770e80a4e9ab8f6eb2e40c58f36dccf7c34ep_bytes: e872030000e936fdffff8bff558bec8btimestamp: 2008-11-10 09:40:35
Version Info:
0: [No Data]

Strictor.116666 (B) also known as:

Lionic	Trojan.Win32.Blocker.j!c
MicroWorld-eScan	Gen:Variant.Strictor.116666
FireEye	Generic.mg.f1fff814467483b4
McAfee	Trojan-FLCM!F1FFF8144674
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Script.Phonzy.A
K7AntiVirus	Trojan ( 004b554f1 )
Alibaba	Ransom:Win32/Blocker.e04f9cfa
K7GW	Trojan ( 004b554f1 )
Cybereason	malicious.446748
VirIT	Trojan.Win32.Worm.RPT
Cyren	W32/Ransom.PN.gen!Eldorado
Symantec	SMG.Heur!gen
ESET-NOD32	a variant of Python/Agent.H
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Ransom.Win32.Blocker.jjgl
BitDefender	Gen:Variant.Strictor.116666
NANO-Antivirus	Trojan.Py2Exe.Agent.eqnaru
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b54f77
Ad-Aware	Gen:Variant.Strictor.116666
Emsisoft	Gen:Variant.Strictor.116666 (B)
F-Secure	Trojan.TR/Worm.Gen
DrWeb	Python.BackDoor.37
Zillya	Trojan.Blocker.Win32.35379
TrendMicro	Ransom_Blocker.R002C0OB122
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tc
Sophos	Mal/Generic-S
Ikarus	Worm.Python.Agent
GData	Gen:Variant.Strictor.116666
Webroot	Trojan.Diple.Gen
Avira	TR/Worm.Gen
MAX	malware (ai score=88)
Gridinsoft	Ransom.Win32.Blocker.sa
ViRobot	Trojan.Win32.Z.Agent.5787921.AS
ZoneAlarm	Trojan-Ransom.Win32.Blocker.jjgl
Microsoft	Trojan:Script/Phonzy.A!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Ursnif.R281934
ALYac	Gen:Variant.Strictor.116666
TACHYON	Ransom/W32.Blocker.5787921
VBA32	TrojanRansom.Blocker
Malwarebytes	Trojan.Script.Python
TrendMicro-HouseCall	Ransom_Blocker.R002C0OB122
Yandex	Trojan.Worm!b5w8FBsXbtc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Python/Agent.O!worm
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)