Malware

Should I remove “Strictor.26789”?

Malware Removal

The Strictor.26789 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.26789 virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Strictor.26789?


File Info:

crc32: 28D7BF1A
md5: 324e0fef77979b12316e70b0fc27d0bc
name: 5-2-46-636.exe
sha1: 32ecfe92a862a1addc38e815654c0b6ab22b510b
sha256: d1ca34f1567de130c39275a0a3411b13a3efd57bf5b4819aa8343a13298a3a35
sha512: 8b3f89efdef7a7a33ad7fcd0e9a448438b733472e25393e1c12b5ead967a050c8ff1ed4cb230340bfd4947a5cf359c8d0c71695e9167d3dac28b2d4c1485f2d2
ssdeep: 1536:KlDeiKE3hY5t1Lle0vawCOtSgiXpcUBp:73/1Ze8BBtw5ZBp
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 2002
InternalName: DDialer
FileVersion: 1, 0, 0, 1
CompanyName:
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: DDialer
SpecialBuild:
ProductVersion: 1, 0, 0, 1
FileDescription: DDialer
OriginalFilename: DDialer.exe
Translation: 0x0407 0x04b0

Strictor.26789 also known as:

MicroWorld-eScanGen:Variant.Strictor.26789
FireEyeGeneric.mg.324e0fef77979b12
CAT-QuickHealDialer.Porndialer.29871
McAfeeDialer-RAS.at.gen.a
CylanceUnsafe
VIPREBehavesLike.Win32.Malware.bsc (vs)
SangforMalware
K7AntiVirusDialer ( 000f9fde1 )
BitDefenderGen:Variant.Strictor.26789
K7GWDialer ( 000f9fde1 )
Cybereasonmalicious.f77979
Invinceaheuristic
F-ProtW32/Webdialer.gen!GSA
TotalDefenseWin32/Dialer.FQ
APEXMalicious
AvastWin32:Dialer-gen2 [Trj]
ClamAVWin.Trojan.Dialer-39
GDataGen:Variant.Strictor.26789
Kasperskynot-a-virus:Porn-Dialer.Win32.eConnect
AlibabaRiskWare:Win32/eConnect.8bbd2b92
NANO-AntivirusTrojan.Win32.Online.crbezk
AegisLabRiskware.Win32.Generic.l0jn
RisingTrojan.RasDialer!1.66EA (CLOUD)
Ad-AwareGen:Variant.Strictor.26789
EmsisoftGen:Variant.Strictor.26789 (B)
ComodoApplicUnwnt.Win32.PornDialer.Agent.~Q@2ml6f
F-SecureDialer.DIAL/000333
DrWebDialer.Premium.224
ZillyaDialer.eConnect.Win32.2
TrendMicroDIAL_RAS.HE
McAfee-GW-EditionDialer-RAS.at.gen.a
CMCPorn-Dialer.Win32!O
SophosDial/190-A
IkarusDialer
CyrenW32/Webdialer.gen!GSA
JiangminPorn-Dialer.Generic.fx
AviraDIAL/000333
MAXmalware (ai score=88)
Antiy-AVLGrayWare[Porn-Dialer]/Win32.eConnect
Endgamemalicious (high confidence)
ArcabitTrojan.Strictor.D68A5
SUPERAntiSpywareTrojan.Agent/Gen-Dialer
ZoneAlarmnot-a-virus:Porn-Dialer.Win32.eConnect
MicrosoftProgram:Win32/Vigram.A
AhnLab-V3Trojan/Win32.Dialer.R9857
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34090.dmKfaSTf6CD
ALYacGen:Variant.Strictor.26789
VBA32BScope.Dialer.Premium
PandaDialer.Gen
ESET-NOD32a variant of Win32/Dialer.0190-Dialers
TrendMicro-HouseCallDIAL_RAS.HE
TencentMalware.Win32.Gencirc.10b58508
YandexDialer.eConnect.Gen
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetRiskware/190
WebrootW32.Dialer.Gen
AVGWin32:Dialer-gen2 [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM11.1.54B5.Malware.Gen

How to remove Strictor.26789?

Strictor.26789 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment