Strictor.256130 (B) removal guide

The Strictor.256130 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.256130 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Strictor.256130 (B)?


File Info:
name: 0647CBB0513FF98827B2.mlw
path: /opt/CAPEv2/storage/binaries/f382606ecbeb8a39811c6aea1998458071270574971b62e9d4d0ddea24b7639b
crc32: 8DF42028
md5: 0647cbb0513ff98827b204f4e472bddd
sha1: f9a945bcb85b77fb3e388d8047829ab7b8cab084
sha256: f382606ecbeb8a39811c6aea1998458071270574971b62e9d4d0ddea24b7639b
sha512: fc47718c723b3910c51629b0cfdee1c3ddae361ae8d71187a10aa3fabcfdaba474907d1207cd09bf75583348be732464c83fc261ac56f17d588952900863e0bd
ssdeep: 768:Rro5bCoh96ku7QOWICZjb3+aUWjKuTegpbMok5JE4bjfSYJZAWTBT9zKyhN:RMjYsECZjb3+1knc5KXiPBT9zVN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12CA5BF15237C5205F1868C70A656810DEEF0AC036929CB73E7BDFD9BDA15B239849F4E
sha3_384: 9e6f13758b8addfb3328a512124eaed256ed0d2a6109cf2c0fc3c2897a2676ce6a3a08bfebdb3b1d8788807b232e83cd
ep_bytes: 428c1d32428c1d32428c1d32428c1d32
timestamp: 2012-08-05 02:21:51

Version Info:
Translation: 0x0409 0x04b0
Comments: Trainer Made By LinGon 2012 - UnMatched Quality Since 2008.
CompanyName: LinGon
FileDescription: A LinGon Trainer
LegalCopyright: LinGon
ProductName: Awesomenauts - 5 Aug 2012 - Trainer by LinGon
FileVersion: 1.02.0003
ProductVersion: 1.02.0003
InternalName: AweNauts+4Tr-LNG_FIXed
OriginalFilename: AweNauts+4Tr-LNG_FIXed.exe

Strictor.256130 (B) also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Strictor.256130
FireEye	Generic.mg.0647cbb0513ff988
McAfee	GenericRXAA-AA!0647CBB0513F
VIPRE	Trojan.Win32.Generic.pak!cobra
K7AntiVirus	Trojan ( 00006f8a1 )
Alibaba	Trojan:Win32/VMProtBad.092857f4
K7GW	Trojan ( 00006f8a1 )
Cybereason	malicious.0513ff
BitDefenderTheta	Gen:NN.ZexaF.34084.cA0@aCiOhOcO
Cyren	W32/A-7fdeb6c8!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R007H0CL721
Paloalto	generic.ml
BitDefender	Gen:Variant.Strictor.256130
Avast	FileRepMalware [PUP]
Ad-Aware	Gen:Variant.Strictor.256130
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Strictor.256130 (B)
APEX	Malicious
Avira	TR/Kazy.kqyzp
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.5788B5
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Strictor.256130
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Strictor.256130
Malwarebytes	CrackTool.Agent
Rising	Trojan.Generic@ML.93 (RDML:23gyRlmQnAk25LJKiUF06g)
Ikarus	Gen.Malware.Heur
AVG	FileRepMalware [PUP]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Strictor.256130 (B)?

Strictor.256130 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X