Categories: Malware

Strictor.282088 removal

The Strictor.282088 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.282088 virus can do?

Behavioural detection: Executable code extraction – unpacking
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Strictor.282088?


File Info:
name: C77D41D4EF7EDA87B34B.mlwpath: /opt/CAPEv2/storage/binaries/b353d21ac3455527c5832f7ef72cb4169f6d0bf9185e2c09176664c7e3a3a3a7crc32: 87C33749md5: c77d41d4ef7eda87b34bbfb3654f7b74sha1: 7fb62729b28209d38636476754291b0996dd1ec8sha256: b353d21ac3455527c5832f7ef72cb4169f6d0bf9185e2c09176664c7e3a3a3a7sha512: ced527719ea7d869c9d371c82d396f61b9068cc173cf4323887ae299e41b798b1084833560a7f401439dab8f8dc299864e0fc4dfcee85f5797b4951b154de596ssdeep: 24576:yHIjtTHeSjd0W3yFk226xCn1Kmqabu2fm:y8lnd0IyFc601Kr2fmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AE1523D0F7071B7AC068C131505AE69E6F059FFA48D48B5753C17E973CB202B6AA263Esha3_384: a7b9e222ebab47d11b6a299bf29d7ef9c0941a7bac8af36bb82402a852e4c52059b23d6d60bf4fab283b7109a769bf3cep_bytes: 68ff5aa491e81b4a080068ff621e20e8timestamp: 2012-08-13 13:58:56
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Strictor.282088 also known as:

Bkav	W32.Common.E88A2696
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.282088
FireEye	Generic.mg.c77d41d4ef7eda87
Skyhigh	BehavesLike.Win32.Generic.cc
ALYac	Gen:Variant.Strictor.282088
Cylance	unsafe
Zillya	Trojan.GenKryptik.Win32.267458
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 004b942f1 )
Alibaba	VirTool:Win32/Obfuscator.fd55f523
K7GW	Adware ( 004b942f1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Strictor.D44DE8
BitDefenderTheta	Gen:NN.ZexaF.36792.3G0@aSxA8Bnb
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/GenKryptik.GORD
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Strictor.282088
NANO-Antivirus	Trojan.Win32.GenKryptik.kcgxxw
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.13f2173b
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1367768
VIPRE	Gen:Variant.Strictor.282088
TrendMicro	TROJ_GEN.R002C0DJD23
Trapmine	malicious.high.ml.score
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1367768
Antiy-AVL	Trojan/Win32.GenKryptik
Xcitium	TrojWare.Win32.Agent.OSCF@5rs7jr
Microsoft	VirTool:Win32/Obfuscator.XZ
ZoneAlarm	UDS:Trojan.Win32.Generic
GData	Gen:Variant.Strictor.282088
Varist	W32/SuspPack.BP.gen!Eldorado
McAfee	Generic FakeAV.iv
MAX	malware (ai score=87)
VBA32	Rootkit.Ressdt
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R002C0DJD23
Rising	Trojan.Generic@AI.100 (RDML:ZOt8CMglWcIFIsGAAeRq3g)
Ikarus	Trojan.Win32.Krypt
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/GenKryptik.GORD!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.9b2820
DeepInstinct	MALICIOUS