Malware

Strictor.233389 removal instruction

Malware Removal

The Strictor.233389 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.233389 virus can do?

  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Strictor.233389?


File Info:

crc32: 27B747A4
md5: b8455220c5a6b73c5530b5d3fee261e7
name: B8455220C5A6B73C5530B5D3FEE261E7.mlw
sha1: 03e15eafcb4571f3327763601329cc76e98df892
sha256: b6fe9904724fc1dd6b5667147c3352a2423df7b07cbf8f51f7e1fb85cf8940d9
sha512: 2b13e2db219e9e0502a9b181a042371d26a0b051c0d44ef11855fdb97addd995ab9f34dd251f01805704f563878e10b374cf65ab38698de90b9501c612611e6d
ssdeep: 24576:68KBDn7EH7buz7aluesrEhX5MDGfiGFnMTn+phchnVoi9Nqd4glF8SfoUD+mX2g2:NKEfugufEFKgdFVphNycitJGGgMK1Db2
type: PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive

Version Info:

LegalCopyright: (C)
ProductName:
FileVersion:
FileDescription: Producer shd
Translation: 0x0804 0x04e4

Strictor.233389 also known as:

K7AntiVirusTrojan ( 0050b64b1 )
Elasticmalicious (high confidence)
DrWebAdware.Searcher.1222
CynetMalicious (score: 100)
CAT-QuickHealW32.Ramnit.A
ALYacGen:Variant.Strictor.233389
CylanceUnsafe
ZillyaTrojan.Agent.Win32.601545
SangforVirus.Win32.Ramnit.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 0050b64b1 )
Cybereasonmalicious.0c5a6b
BaiduMulti.Threats.InArchive
CyrenW32/Dropper.DS.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of NSIS/TrojanDropper.Agent.BT
ZonerTrojan.Win32.Ramnit.23698
APEXMalicious
AvastWin32:RmnDrp [Inf]
ClamAVWin.Trojan.Ramnit-1847
KasperskyHEUR:Virus.Win32.Ramnit.gen
BitDefenderGen:Variant.Strictor.233389
NANO-AntivirusVirus.Win32.Ramnit.eslalb
MicroWorld-eScanGen:Variant.Strictor.233389
Ad-AwareGen:Variant.Strictor.233389
SophosMal/Agent-AUG
ComodoMalware@#g08hoslh1m51
BitDefenderThetaAI:FileInfector.EAEEA7850C
TrendMicroPE_RAMNIT.H
McAfee-GW-EditionBehavesLike.Win32.AdwareAdload.tc
FireEyeGeneric.mg.b8455220c5a6b73c
EmsisoftAdware.Dropper (A)
SentinelOneStatic AI – Malicious PE
AviraW32/Ramnit.CD
Antiy-AVLTrojan/Generic.ASMalwNS.6
KingsoftWin32.Infected.AutoInfector.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Strictor.D38FAD
GDataGen:Variant.Strictor.233389
MAXmalware (ai score=82)
VBA32Adware.Searcher
MalwarebytesTrojan.ChinAd
PandaGeneric Suspicious
TrendMicro-HouseCallPE_RAMNIT.H
RisingVirus.Ramnit!1.9AA5 (CLASSIC)
IkarusVirus.Ramnit
FortinetW32/Nimnul.A!tr
AVGWin32:RmnDrp [Inf]
Paloaltogeneric.ml

How to remove Strictor.233389?

Strictor.233389 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment