Categories: Malware

Strictor.240399 (B) information

The Strictor.240399 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.240399 (B) virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Checks for the presence of known windows from debuggers and forensic tools
  • The following process appear to have been packed with Themida: 4.exe, plugin.exe
  • Installs itself for autorun at Windows startup
  • Checks for the presence of known devices from debuggers and forensic tools
  • Detects the presence of Wine emulator via registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

lodddd01.info
lodddd02.info

How to determine Strictor.240399 (B)?


File Info:

crc32: 973D2A14md5: aa3390ae3e7f2b4c8b2b557d688a23cename: 4.exesha1: 5db6e1a9ee95ac2d99bf8c90b02999ae3e48d358sha256: 11e07f3b726c1847708409318798056e757510264c197e8d3c66ca45cc3c04aasha512: f837cfe7424adf4c051aabb4ff7d45d665be8dd312c369277223626de01b873ee4aed68f0f8204e09cbc878a306a59d0499dd786b1288faac5081fdb5a287d09ssdeep: 24576:+5sMQmw/lH+PZhxS042jJWPqx7F1BAzGTJej1sEIBsgYW+rraeDy20thsz9HIty:+qRsnxHjwPIkK3BxYXaeXuWz9otyhHtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Strictor.240399 (B) also known as:

Bkav W32.HfsAutoB.
DrWeb Trojan.Siggen9.12563
MicroWorld-eScan Gen:Variant.Strictor.240399
FireEye Generic.mg.aa3390ae3e7f2b4c
Qihoo-360 Generic/Backdoor.990
McAfee Artemis!AA3390AE3E7F
Cylance Unsafe
Sangfor Malware
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Strictor.240399
K7GW Trojan ( 0040f4ef1 )
K7AntiVirus Trojan ( 0040f4ef1 )
Arcabit Trojan.Strictor.D3AB0F
Invincea heuristic
BitDefenderTheta Gen:NN.ZexaF.34090.1zWaaK0Oltp
Cyren W32/Trojan.ANXS-6254
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Packed.Themida.HIG
APEX Malicious
Paloalto generic.ml
Kaspersky HEUR:Backdoor.MSIL.Generic
Alibaba Packed:Win32/Themida.91d2e963
Avast Win32:PWSX-gen [Trj]
Tencent Win32.Trojan.Agent.Lmkh
Ad-Aware Gen:Variant.Strictor.240399
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.TPM.Gen
TrendMicro TROJ_FRS.VSNTBH20
McAfee-GW-Edition BehavesLike.Win32.Generic.tc
Fortinet PossibleThreat.MU
Trapmine malicious.high.ml.score
Emsisoft Gen:Variant.Strictor.240399 (B)
SentinelOne DFI – Malicious PE
Webroot W32.Trojan.Gen
Avira TR/Crypt.TPM.Gen
MAX malware (ai score=100)
Endgame malicious (high confidence)
Microsoft Trojan:Win32/Occamy.C
ZoneAlarm HEUR:Backdoor.MSIL.Generic
Acronis suspicious
VBA32 BScope.Trojan-Dropper.Inject
TrendMicro-HouseCall TROJ_FRS.VSNTBH20
Rising Trojan.Occamy!8.F1CD (CLOUD)
Ikarus Trojan.Win32.Themida
GData Gen:Variant.Strictor.240399
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.9ee95a
Panda Trj/Genetic.gen

How to remove Strictor.240399 (B)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Should I remove “Generic.Dacic.8952383F.A.0EF6EEFF”?

The Generic.Dacic.8952383F.A.0EF6EEFF is considered dangerous by lots of security experts. When this infection is active,…

14 seconds ago

About “Malware.AI.2345020079” infection

The Malware.AI.2345020079 is considered dangerous by lots of security experts. When this infection is active,…

26 seconds ago

About “Barys.434151 (B)” infection

The Barys.434151 (B) is considered dangerous by lots of security experts. When this infection is…

1 min ago

Generic.Dacic.94CCEEA9.A.3D7648AD information

The Generic.Dacic.94CCEEA9.A.3D7648AD is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Lazy.359443 (B) removal guide

The Lazy.359443 (B) is considered dangerous by lots of security experts. When this infection is…

31 mins ago

About “Trojan.Win32.VB.akjo” infection

The Trojan.Win32.VB.akjo is considered dangerous by lots of security experts. When this infection is active,…

52 mins ago