Categories: Malware

How to remove “Strictor.281682 (B)”?

The Strictor.281682 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.281682 (B) virus can do?

Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Deletes executed files from disk

How to determine Strictor.281682 (B)?


File Info:
name: F01998C0A919F8C73396.mlwpath: /opt/CAPEv2/storage/binaries/fa18119f0a91d24e6e982578d62cf4abb0a082a10d2c4121f00f3982d715c129crc32: 00C32FC8md5: f01998c0a919f8c73396a4d4d4960da2sha1: beb94e1537ac79e77f48e5a12ff6aaa524aa4bdbsha256: fa18119f0a91d24e6e982578d62cf4abb0a082a10d2c4121f00f3982d715c129sha512: 8ce6c293b390b4e48761b86ca19814e46f71326a426552180223f157a6a04f13ba4baa5a99fe7d1dc9c382bc02c995cee5c4aa830ee5349cffcd620e5f47b496ssdeep: 6144:sXzKdNY49u8rVJVz9mdB7Les+eFMBxIz01net:ja4A8zMBu/eF+C01type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F5447C336E4A5901FB364F3805A367EE7A96EE02249F354B10C5B61E7177293120BA7Fsha3_384: 3282c2b48777b2765dbaa78f0e7d8a68c98898cb98b51101ee04f62ffa3ae76378b6d2d9f78949a8f86fa4125ab96dfeep_bytes: 60be00d045008dbe0040faff5783cdfftimestamp: 2022-11-03 11:35:44
Version Info:
Comments: ITS GCO BootstrapCompanyName: Internet Testing SystemsFileDescription: ITS GCO BootstrapFileVersion: 2.5.0.2InternalName: VerifyAndLaunchLegalCopyright: (C) Internet Testing SystemsOriginalFilename: VerifyAndLaunch.exeProductName: ITS GCO BootstrapProductVersion: 2.5.0.2Translation: 0x0409 0x04b0

Strictor.281682 (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Strictor.4!c
MicroWorld-eScan	Gen:Variant.Strictor.281682
FireEye	Generic.mg.f01998c0a919f8c7
McAfee	GenericRXWH-XS!F01998C0A919
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Cybereason	malicious.0a919f
BitDefenderTheta	AI:Packer.4625DC2A1F
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Strictor.281682
Emsisoft	Gen:Variant.Strictor.281682 (B)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
Trapmine	malicious.high.ml.score
GData	Gen:Variant.Strictor.281682
Jiangmin	TrojanSpy.Xegumumune.zj
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.PossibleThreat
Arcabit	Trojan.Strictor.D44C52
Rising	Trojan.Generic@AI.100 (RDML:h6PMJvb8wHaevHD14r0SZA)
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)