Categories: Malware

Strictor.160287 removal

The Strictor.160287 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.160287 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Anomalous binary characteristics

How to determine Strictor.160287?


File Info:
crc32: BBE44814md5: 18ce95b4264651f80dc500b2d64779f3name: 1.vmp.exesha1: 7040d9b9f87645a472709253c696ff19b0be8cb8sha256: 0ec207133ee795d37df4f88809abec3eb4ee126e96f51a1376576bf3ff7a56dfsha512: 108f1c9e724e7db72acb10e66daa3af5081df9c873da0864b981b3d5a0d2ef4598accf0ad455eeb59d411da88c9ef9cba7f8d4c6b2594e88ce8d2883ed5641d8ssdeep: 98304:AW3NwJdsGwsgb0J9y/GFENO91eOhpMZrD3gwE86ksG77TJDuvG6qlN:dNayNT0Jj8O91erWdksq2G6mNtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248FileVersion: 4.5.0.0Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: BXProductVersion: 4.5.0.0FileDescription: BXTranslation: 0x0804 0x04b0

Strictor.160287 also known as:

Bkav	HW32.Packed.E9B1
MicroWorld-eScan	Gen:Variant.Strictor.160287
CAT-QuickHeal	Trojan.Zenshirsh.SL7
ALYac	Gen:Variant.Strictor.160287
Cylance	Unsafe
Zillya	Trojan.Packed.Win32.125399
K7GW	Trojan ( 0029921a1 )
K7AntiVirus	Trojan ( 0029921a1 )
Arcabit	Trojan.Strictor.D2721F
TrendMicro	TROJ_GEN.R005C0PCT18
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Packed.VMProtect.AAM
TrendMicro-HouseCall	TROJ_GEN.R005C0PCT18
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Strictor.160287
NANO-Antivirus	Trojan.Win32.Banker1.ezhcmg
Avast	Win32:Malware-gen
Rising	Malware.Undefined!8.C (TFE:5:1U81rv6KYeJ)
Ad-Aware	Gen:Variant.Strictor.160287
Emsisoft	Gen:Variant.Strictor.160287 (B)
Comodo	UnclassifiedMalware
F-Secure	Gen:Variant.Strictor.160287
DrWeb	Trojan.Siggen7.34753
VIPRE	Trojan.Win32.Autorun.dm (v)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
Sophos	Generic PUA EG (PUA)
Ikarus	Trojan.Win32.VMProtect
Cyren	W32/Trojan.MPXF-3753
Jiangmin	Trojan.Generic.caxim
Webroot	W32.Autorun
Avira	TR/Black.Gen2
Antiy-AVL	RiskWare[RiskTool]/Win32.FlyStudio
Microsoft	Trojan:Win32/Tiggre!rfn
Endgame	malicious (high confidence)
ViRobot	Trojan.Win32.Z.Strictor.4510034
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Application.PUPStudio.A
AhnLab-V3	Malware/Win32.Generic.C2446836
McAfee	Generic-FAAF!18CE95B42646
AVware	Trojan.Win32.Autorun.dm (v)
MAX	malware (ai score=99)
VBA32	TrojanPSW.Banker
WhiteArmor	Malware.HighConfidence
Yandex	Trojan.Agent!RJpWHBpRGJs
SentinelOne	static engine – malicious
eGambit	Unsafe.AI_Score_92%
Fortinet	W32/Generic_PUA_EG!tr
AVG	Win32:Malware-gen
Cybereason	malicious.9f8764
Panda	Trj/CI.A
CrowdStrike	malicious_confidence_100% (W)