Strictor.122560 (B) (file analysis)

The Strictor.122560 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.122560 (B) virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

hao.360.cn

www.bing.com

How to determine Strictor.122560 (B)?


File Info:
crc32: 4FCB3E99
md5: 0de19d334ae0a47397419d86deeaff7c
name: openlink.exe
sha1: e5f0c71e4dc8e0088c35a552d873013b3055b66c
sha256: e3872e08f6d10df5fe661979422c000ace02ddb8604d782a8dfc6098c11ca2b0
sha512: 496d6aa013005a2a0ea073f8fed9a54474f960abf094aeb8f0a0aeab2cca1c57a4778cd56e8a6d8ae1fe4fbc458037e58af9cd62e8817aaf315b66cbc00c940e
ssdeep: 3072:zMUWAHrRW60Ag/dTC4/Hd7ilq3kjca+TjecjMUCqT/0uf:zMGHrRWBTCW+U3k9GjR/X
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 
CompanyName: 
ProductName: 
ProductVersion: 
FileDescription: x8bbfx95eex4e92x8054x7f51
OriginalFilename: 
Translation: 0x0804 0x03a8

Strictor.122560 (B) also known as:

MicroWorld-eScan	Gen:Variant.Strictor.122560
FireEye	Generic.mg.0de19d334ae0a473
CAT-QuickHeal	Trojan.MauvaiseRI.S5242255
McAfee	GenericRXAA-AA!0DE19D334AE0
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Strictor.122560
CrowdStrike	win/malicious_confidence_70% (W)
TrendMicro	TROJ_GEN.R002C0PCC20
BitDefenderTheta	Gen:NN.ZexaF.34100.jmKfa8volLjj
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
GData	Gen:Variant.Strictor.122560
NANO-Antivirus	Trojan.Win32.Agent.eojcfn
AegisLab	Trojan.Win32.Strictor.4!c
Rising	Trojan.Tiggre!8.ED98 (CLOUD)
Emsisoft	Gen:Variant.Strictor.122560 (B)
Comodo	Malware@#1vbxxdaguntsh
F-Secure	Heuristic.HEUR/AGEN.1002528
Invincea	heuristic
McAfee-GW-Edition	GenericRXCK-UJ!D38168BAC673
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Avira	HEUR/AGEN.1002528
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Strictor.D1DEC0
Acronis	suspicious
ALYac	Gen:Variant.Strictor.122560
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PCC20
SentinelOne	DFI – Suspicious PE
Fortinet	W32/GenericRXCK.UJ!tr
Ad-Aware	Gen:Variant.Strictor.122560
AVG	FileRepMalware
Cybereason	malicious.34ae0a

How to remove Strictor.122560 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Strictor.122560 (B) (file analysis)