Malware

Strictor.233865 removal instruction

Malware Removal

The Strictor.233865 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.233865 virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (5 unique times)
  • A process created a hidden window
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Executed a very long command line or script command which may be indicative of chained commands or obfuscation
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Detects VirtualBox through the presence of a registry key
  • Detects VMware through the presence of a registry key
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

asmupdate3.top
iplogger.org
apps.identrust.com
isrg.trustid.ocsp.identrust.com
ocsp.int-x3.letsencrypt.org
asmupdate4.top

How to determine Strictor.233865?


File Info:

crc32: C8ADA8DA
md5: 91a4e1e0e4b7b8b86876237c34c817ea
name: eupanda.exe
sha1: dfc5c059e6d3ad743f02b755c396e38cb7d84d36
sha256: 2f87741b700ead4acc6ed82d781626d389c71fd17f50666ab6a978ea4a101831
sha512: c8e0d2ee082ee2ab7c1489f3798c8cdad615657ad6bc6ff1d484cd28c0992ce031974702c674a8c05e98b9b352bce43eb872118e75e5ee3e238007f67ead32c9
ssdeep: 3072:BNuok1nAo/k2U4Gha8Sz9oflTXDCNJf6B6S2zWVPECa2pgTwd:TuoIv/k2ShmulLQ68u3W
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Strictor.233865 also known as:

MicroWorld-eScanGen:Variant.Strictor.233865
McAfeeDownloader-FBWT!91A4E1E0E4B7
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_60% (W)
BitDefenderGen:Variant.Strictor.233865
ArcabitTrojan.Strictor.D39189
F-ProtW32/Downloader-WebExe-based!Max
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EVP
APEXMalicious
KasperskyTrojan.Win32.Chapak.egpy
AlibabaTrojanDownloader:Win32/Generic.94c167e4
RisingDownloader.Agent!1.BB58 (CLASSIC)
EmsisoftGen:Variant.Strictor.233865 (B)
F-SecureTrojan.TR/Dldr.Agent.aqjnr
McAfee-GW-EditionBehavesLike.Win32.PUPXDB.ch
FortinetW32/Agent.EVP!tr.dldr
FireEyeGeneric.mg.91a4e1e0e4b7b8b8
IkarusWin32.Outbreak
CyrenW32/Downloader-WebExe-based!Max
MAXmalware (ai score=84)
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmTrojan.Win32.Chapak.egpy
VBA32BScope.TrojanRansom.Crusis
ALYacGen:Variant.Strictor.233865
Ad-AwareGen:Variant.Strictor.233865
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H0CLO19
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_99%
GDataGen:Variant.Strictor.233865
BitDefenderThetaGen:NN.ZexaF.33558.juW@aymRKSkk
AVGFileRepMalware
AvastFileRepMalware
Qihoo-360Win32/Trojan.f4b

How to remove Strictor.233865?

Strictor.233865 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment