Malware

Strictor.266739 removal

Malware Removal

The Strictor.266739 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Strictor.266739 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Checks for the presence of known devices from debuggers and forensic tools
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Strictor.266739?



File Info:

name: 0E213FBDD6089A40E834.mlw
path: /opt/CAPEv2/storage/binaries/d038818616a73915985ef0829b51b5a4d707186031b78cca5c6326d4ac4363c4
crc32: FB0AAE84
md5: 0e213fbdd6089a40e834a96ae5cf7a0f
sha1: a2ef9912571d02778563134aac2e8a9e5df28171
sha256: d038818616a73915985ef0829b51b5a4d707186031b78cca5c6326d4ac4363c4
sha512: 8315960bfe9fba705f7aeb9ac79a19c9e8aab847db95e54f138120b73c895d693408cf4a85805c07e7770fce06f674c9d2e5407591d4cae68a146a9a344b5c88
ssdeep: 3072:LoPSJBIfPgPXGYATeeeG3GKNCtQavyi3rTCY6DFdcI1Du+pQj7B1PJ8D2iR2aHDz:U2ICtJqi7TH0FuI1DHefGH+A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D2347DE5AB10BF88D4203CBF6571CB85817C5507251B1AE9CAB63AE9C43159CBE3A3C7
sha3_384: 90fad1a6130c8fd2a94dab8868b7a47e50b3b1988335399ee8a81024641fc5f95ccfd3b8fb4a34475418c0a1d838204a
ep_bytes: eb0583b81fdf7750eb0581ed9798e5e8
timestamp: 2092-11-27 00:08:30


Version Info:

FileDescription: AdGuard Web Installer
LegalCopyright: (C) 2009-2018 Adguard Software Ltd
ProductName: AdGuard Web Installer
ProductVersion: 1.0
CompanyName: Adguard Software Ltd
Translation: 0x0409 0x04b0

Strictor.266739 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Reline.i!c
MicroWorld-eScanGen:Variant.Strictor.266739
FireEyeGeneric.mg.0e213fbdd6089a40
McAfeeGenericRXAA-AA!0E213FBDD608
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
AlibabaPacked:Win32/Obsidium.401bd168
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.2571d0
BitDefenderThetaGen:NN.ZexaF.34084.oq2@aiAstAoi
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.Obsidium.CZ
TrendMicro-HouseCallTROJ_GEN.R04CH0CLB21
KasperskyVHO:Trojan-PSW.Win32.Reline.gen
BitDefenderGen:Variant.Strictor.266739
AvastWin32:Trojan-gen
Ad-AwareGen:Variant.Strictor.266739
EmsisoftGen:Variant.Strictor.266739 (B)
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
GDataGen:Variant.Strictor.266739
JiangminTrojan.PSW.Reline.nk
Antiy-AVLTrojan/Generic.ASMalwS.34E908B
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Strictor.D411F3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R457452
Acronissuspicious
VBA32TScope.Malware-Cryptor.SB
ALYacGen:Variant.Strictor.266739
MAXmalware (ai score=84)
MalwarebytesSpyware.RedLineStealer
RisingTrojan.Generic@ML.87 (RDMK:E4CUnFy0H0TQi/zhVkgn1Q)
IkarusTrojan.Win32.Obsidium
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_60% (D)

How to remove Strictor.266739?

Strictor.266739 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment