Categories: Malware

Strictor.219380 removal instruction

The Strictor.219380 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.219380 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a slightly modified copy of itself

How to determine Strictor.219380?


File Info:
crc32: BD37B142md5: 0d663f307f3f7188066022e1e18ebfccname: 0D663F307F3F7188066022E1E18EBFCC.mlwsha1: 98490506134d8d28f4d9b96dc3cf55b535bb1e73sha256: 7a570af865da3a1f6b47bc613a5c3ece7f73fd4e8badf26c925107ad18b9e11bsha512: b9ce7c32be9b2c2911795a047a2b7c0f95fe7ff4cec22436fff124c8fe4555b5f53006fb7c6c18b399394bc8966d4757a363146d8e9c63cf5da7112790c88ba6ssdeep: 3072:6uo/ry3LwjBxanYH3HdF3glFS9L4f39gCHxSG+e2UDtKOYA7NanqnKZYpGNB:zGlmnI/gl2o5aoKOYAKqnrpGNBtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
LegalCopyright: InternalName: installFileVersion: 8.0CompanyName: ProductName: EVA Universal BinaryProductVersion: 8.0FileDescription: EVA Universal BinaryTranslation: 0x0419 0x04e3

Strictor.219380 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.219380
FireEye	Generic.mg.0d663f307f3f7188
CAT-QuickHeal	TrojanDropper.Sysn
ALYac	Gen:Variant.Strictor.219380
Cylance	Unsafe
VIPRE	Win32.Malware!Drop
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0043a7501 )
BitDefender	Gen:Variant.Strictor.219380
K7GW	Trojan ( 0043a7501 )
CrowdStrike	win/malicious_confidence_60% (D)
Cyren	W32/Filecoder.AI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Dropper.Win32.Sysn.cdqh
Alibaba	Ransom:Win32/Haperlock.c15b7fe6
NANO-Antivirus	Trojan.Win32.Encoder.ejvycm
AegisLab	Trojan.Win32.Sysn.4!c
Rising	Ransom.Haperlock!8.5355 (CLOUD)
Ad-Aware	Gen:Variant.Strictor.219380
Emsisoft	Gen:Variant.Strictor.219380 (B)
Comodo	TrojWare.Win32.Ransom.Haperlock.A@8fne1o
F-Secure	Trojan.TR/AD.Haperlock.pzoxo
DrWeb	Trojan.Encoder.217
Zillya	Trojan.Filecoder.Win32.4753
TrendMicro	Ransom.Win32.HAPERLOCK.SMI
McAfee-GW-Edition	BehavesLike.Win32.HLLP.cc
MaxSecure	Trojan.Malware.10388728.susgen
Sophos	Mal/Generic-S + Troj/AutoG-BL
Ikarus	Packer.Win32.Krap
Avira	TR/AD.Haperlock.pzoxo
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Ransom:Win32/Haperlock.A
Arcabit	Trojan.Strictor.D358F4
AhnLab-V3	Dropper/Win32.Sysn.C1778444
ZoneAlarm	Trojan-Dropper.Win32.Sysn.cdqh
GData	Gen:Variant.Strictor.219380
Cynet	Malicious (score: 100)
ESET-NOD32	Win32/Filecoder.NAN
McAfee	GenericRXAA-AA!0D663F307F3F
VBA32	TrojanDropper.Sysn
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.82590
TrendMicro-HouseCall	Ransom.Win32.HAPERLOCK.SMI
Tencent	Malware.Win32.Gencirc.10b0c251
Yandex	Trojan.GenAsa!yw59gW9xxcw
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Filecoder.NAN!tr
BitDefenderTheta	Gen:NN.ZexaF.34608.kmLfaafC1Pnk
AVG	Win32:Malware-gen
Cybereason	malicious.07f3f7
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.0eb