Malware

Strictor.246676 removal instruction

Malware Removal

The Strictor.246676 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.246676 virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Strictor.246676?


File Info:

crc32: F742BACB
md5: ba0b71edba1821748ab1b41efe0c7daf
name: share_01.exe
sha1: 067a740da6e06f610955a46b28e7330d999a0c6e
sha256: 5d5247779ae6fc77c970ea1f984fb6615561a5f0e0d6a933d3397d2bed53e65f
sha512: 9ffacc49ad7331fe5bea7af8d6e2a180c215b9bafbae9cc4aa6ebfaf492b2e97663a8422a2a48080026e29ba80cb42d3538cfbfbc3e9b74fd028972c4f444ef6
ssdeep: 24576:6Z0Z+Vq4kK0fNsMpfPIlh/1Zho3sx0muSQ2GvXI:6SZwypfNsM29o3oQxX
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) 2020 x4e0ax6d77x5b50x672ax7f51x7edcx79d1x6280x6709x9650x516cx53f8
InternalName: news.exe
FileVersion: 1.0.0.1
CompanyName: x4e0ax6d77x5b50x672ax7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: easypdf reader
ProductVersion: 1.0.0.1
FileDescription: x8ff7x4f60x65b0x95fb
OriginalFilename: news.exe
Translation: 0x0804 0x04b0

Strictor.246676 also known as:

MicroWorld-eScanGen:Variant.Strictor.246676
FireEyeGen:Variant.Strictor.246676
CAT-QuickHealTrojan.IGENERIC
McAfeeGenericRXAA-AA!BA0B71EDBA18
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan-Downloader ( 0056617b1 )
BitDefenderGen:Variant.Strictor.246676
K7GWTrojan-Downloader ( 0056617b1 )
TrendMicroTROJ_GEN.R011C0PG220
CyrenW32/Trojan.VRTC-1290
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R011C0PG220
AvastWin32:AdwareX-gen [Adw]
GDataGen:Variant.Strictor.246676
Kasperskynot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
AlibabaTrojan:Win32/ComponentBased.205ec99c
ViRobotTrojan.Win32.Z.Strictor.1010632
RisingAdware.Agent!1.C53A (CLOUD)
Endgamemalicious (high confidence)
SophosGeneric PUA AG (PUA)
F-SecureTrojan.TR/Dldr.Adload.dqmce
ZillyaAdware.ComponentBased.Win32.65
EmsisoftGen:Variant.Strictor.246676 (B)
IkarusTrojan-Downloader.Win32.Adload
JiangminAdWare.ComponentBased.ai
WebrootW32.Adware.Gen
AviraTR/Dldr.Adload.dqmce
MAXmalware (ai score=99)
MicrosoftPUA:Win32/CoinMiner
ArcabitTrojan.Strictor.D3C394
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
CynetMalicious (score: 85)
AhnLab-V3PUP/Win32.AdLoad.C3923949
VBA32Adware.ComponentBased
ALYacGen:Variant.Strictor.246676
Ad-AwareGen:Variant.Strictor.246676
MalwarebytesRiskWare.BitCoinMiner
PandaTrj/RnkBend.A
APEXMalicious
ESET-NOD32a variant of Win32/TrojanDownloader.Adload.NUS
TencentMalware.Win32.Gencirc.10cddae6
FortinetW32/Adload.NUS!tr
AVGWin32:AdwareX-gen [Adw]

How to remove Strictor.246676?

Strictor.246676 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment