Malware

Strictor.146151 malicious file

Malware Removal

The Strictor.146151 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.146151 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates a copy of itself
  • Attempts to disable UAC
  • Attempts to create or modify system certificates

Related domains:

f.lewd.se
paste.ee

How to determine Strictor.146151?


File Info:

crc32: AD1B2932
md5: 1df79fa2c7936be4bb21fc00da50abad
name: 1DF79FA2C7936BE4BB21FC00DA50ABAD.mlw
sha1: 0194dc02ef4683ce157eca68dbcb56ca60cc4be5
sha256: f935c5888db1978a453552ae1bcff0b5a72908bb3f7901e4e848c4e2d4bf86a5
sha512: ad4b2d767d0203fc44d34ef797167f6f9d4471378380c9f396524c90d123d7928ab3e23aa3e0a889ef9d6da88e327f7abcf8a4b117638fa50624fd932405aeae
ssdeep: 3072:sBietm++3bqGsCmByk4u5v5c1smXzYu/+uH/fjp/5w4YaIb9rRuwzjZI:/vezBykAxXU8+uH/fjp/5w45+p
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017
Assembly Version: 1.0.0.0
InternalName: WindowsAppT6.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: WindowsAppT6.exe

Strictor.146151 also known as:

Elasticmalicious (high confidence)
FireEyeGeneric.mg.1df79fa2c7936be4
McAfeeDownloader-FBOZ!1DF79FA2C793
MalwarebytesGeneric.Malware/Suspicious
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
K7AntiVirusTrojan-Downloader ( 005064611 )
BitDefenderGen:Variant.Strictor.146151
K7GWTrojan-Downloader ( 005064611 )
Cybereasonmalicious.2c7936
CyrenW32/MSIL_Perseus.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 90)
KasperskyHEUR:Trojan.MSIL.Generic
NANO-AntivirusTrojan.Win32.Agent.eqipse
MicroWorld-eScanGen:Variant.Strictor.146151
Ad-AwareGen:Variant.Strictor.146151
SophosMal/Generic-S
ComodoMalware@#3ky96ofmace2u
F-SecureHeuristic.HEUR/AGEN.1120506
DrWebTrojan.DownLoader25.2135
TrendMicroTROJ_DLOADR.SMSL
McAfee-GW-EditionBehavesLike.Win32.Generic.fm
EmsisoftGen:Variant.Strictor.146151 (B)
IkarusTrojan-Downloader.MSIL.Agent
JiangminTrojan.PSW.Tepfer.hgs
AviraHEUR/AGEN.1120506
MAXmalware (ai score=85)
Antiy-AVLTrojan[Downloader]/Win32.Agent
MicrosoftTrojan:Win32/Ymacco.AAF9
ArcabitTrojan.Strictor.D23AE7
ZoneAlarmHEUR:Trojan.MSIL.Generic
GDataGen:Variant.Strictor.146151
AhnLab-V3Trojan/Win32.RL_Agent.C3516591
VBA32Trojan.Downloader
ALYacGen:Variant.Strictor.146151
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.CZM
TrendMicro-HouseCallTROJ_DLOADR.SMSL
RisingDownloader.Agent!8.B23 (TFE:C:t2VfBRhSEDU)
YandexTrojan.DL.Agent!4NFcKsBS0hc
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Generic.AP.9EF3E0!tr
BitDefenderThetaGen:NN.ZemsilF.34804.um0@aulO2Xm
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Win32/Sorter.AVE.DotNetFile.A

How to remove Strictor.146151?

Strictor.146151 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment