Malware

Should I remove “Strictor.248367”?

Malware Removal

The Strictor.248367 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.248367 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Attempts to interact with an Alternate Data Stream (ADS)
  • Anomalous binary characteristics

Related domains:

nodejs.org
www.torproject.org
dist.torproject.org

How to determine Strictor.248367?


File Info:

crc32: 2205C4D9
md5: 1f0613891576c43e4202cb678a2a4a01
name: 1F0613891576C43E4202CB678A2A4A01.mlw
sha1: a2d4b0914d164f2088130bee3cdcf4e5f4765c38
sha256: 6269fd417f93e7c0d7cab576b35dc3b6f6a58c0f04e75533bad84987c228f0e6
sha512: bcfba4bf480d35bfd98124e1f731c7548317d653c2870b37b43c349f8364246bf2cd23b0af4475461e2875aa004b505cbabc3eb08a849e3d9aa14bd15a6eba15
ssdeep: 12288:LCp0jH/Op7j0hxSSJPBS27lGm4sxIHXC6Pu1LoGHFCZRlIzF/+WWPFDpIF:LCp0jfON0KSJPBpBx3qHXC6Pu1EGHFCE
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Strictor.248367 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Multi.Generic.4!c
DrWebJS.Siggen5.40263
CAT-QuickHealTrojan.Torjok
ALYacTrojan.Torjok.gen
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/TorJok.eaf06aef
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.91576c
CyrenW32/Trojan.TNSB-2842
SymantecTrojan.Gen.MBT
ESET-NOD32JS/Agent.CC
APEXMalicious
AvastOther:Malware-gen [Trj]
CynetMalicious (score: 99)
KasperskyTrojan.Win32.TorJok.lr
BitDefenderGen:Variant.Strictor.248367
NANO-AntivirusTrojan.Win32.TorJok.jcxhpu
MicroWorld-eScanGen:Variant.Strictor.248367
TencentMalware.Win32.Gencirc.10cdebd2
Ad-AwareGen:Variant.Strictor.248367
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.bc
FireEyeGeneric.mg.1f0613891576c43e
EmsisoftGen:Variant.Strictor.248367 (B)
AviraTR/Torjok.fbqvj
Antiy-AVLTrojan/Generic.ASSuf.38905
KingsoftWin32.Heur.KVM007.a.(kcloud)
MicrosoftTrojan:Win32/Ymacco.AA62
GDataGen:Variant.Strictor.248367
McAfeeTrojan-FTHY!1F0613891576
MAXmalware (ai score=82)
VBA32Trojan.TorJok
PandaTrj/CI.A
RisingTrojan.ScriptRunner!1.CA86 (CLASSIC)
IkarusTrojan.Script
MaxSecureTrojan.Malware.73974834.susgen
FortinetW32/TorJok.LR!tr
AVGOther:Malware-gen [Trj]
Paloaltogeneric.ml

How to remove Strictor.248367?

Strictor.248367 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment