About “Strictor.266256” infection

The Strictor.266256 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.266256 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Strictor.266256?


File Info:
name: 09693400C51BD81BD998.mlw
path: /opt/CAPEv2/storage/binaries/beb2039fbcd6b43d715433ccc30655c17b11a70816ad02e538abb98374844471
crc32: 499178F2
md5: 09693400c51bd81bd998bca563567288
sha1: 0642e21ec8fab2631bdbfea928bfe927ee20f446
sha256: beb2039fbcd6b43d715433ccc30655c17b11a70816ad02e538abb98374844471
sha512: 52b6e1fb20711738e9f118cf1695fbd1b248a44e971516c664a50822ef5cda433ad93f1bc44afa53f50561f11fda60a7c2ed314ff98ad93aad4b56efd582dfd2
ssdeep: 384:bMUOsEoL+kLKibUCDbv4ZL2L7UQwsrz6rzPq:bMUOLc/KibZQdCIkq
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1648261069788CF24D67F4A31DCB295A607B77F40CD1297DB59C4BE1B3D722408A926A3
sha3_384: e58bc925c70714a5c65fbd78f1c4ea5ff7aaa97ce5c1c31465606db8a233ed51a95d571abbe5b8cd7c5e738cd0166a8d
ep_bytes: ff250020400000000000000000000000
timestamp: 2094-10-27 03:41:45

Version Info:
Translation: 0x0000 0x04b0
Comments: Adobe Download Manager
CompanyName: Adobe Inc
FileDescription: Adobe Download Manager
FileVersion: 2.0.0.601
InternalName: Purchase_Order#29042019115.exe
LegalCopyright: Copyright 2019 Adobe Inc. All rights reserved.
LegalTrademarks: 
OriginalFilename: Purchase_Order#29042019115.exe
ProductName: Adobe Download Manager
ProductVersion: 2.0.0.601
Assembly Version: 2.0.0.601

Strictor.266256 also known as:

MicroWorld-eScan	Gen:Variant.Strictor.266256
FireEye	Gen:Variant.Strictor.266256
ALYac	Gen:Variant.Strictor.266256
K7AntiVirus	Trojan-Downloader ( 0058def51 )
K7GW	Trojan-Downloader ( 0058def51 )
Cyren	W32/MSIL_Troj.AYR.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/TrojanDownloader.Agent.KHR
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Backdoor.MSIL.Broide.gen
BitDefender	Gen:Variant.Strictor.266256
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Strictor.266256 (B)
Avira	TR/Dldr.Agent.xzdqc
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Strictor.266256
Cynet	Malicious (score: 99)
McAfee	Artemis!09693400C51B
Fortinet	MSIL/Agent.KHR!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilCO.34182.bm0@aao9M2
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/GdSda.A

How to remove Strictor.266256?

Strictor.266256 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X