Categories: Malware

About “Strictor.34346” infection

The Strictor.34346 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.34346 virus can do?

Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

zndlq.zuo45.com

ip.biyuhu.com

How to determine Strictor.34346?


File Info:
crc32: 5C75BA30md5: 4265dd74f504eb495ab368323333aec1name: cqwndlq.exesha1: 2652c84b26a4ea4e18c81f27b5bf8f65334779ccsha256: f094217b56a5c78b7aa6579c7b9c26f7260a48bb4aaa00d8300e62405b6600b1sha512: 616b9574be5fb87c17a38f76795e0c9a9d47375feea334fbfd077d4bba3adab75249f5605cbb4783318b11dbf53aabd5f7467a97a0d5f9426cb4e77e8b95d100ssdeep: 98304:W/cm7/AEcQAZTLpJCVSfudD5QAVPKBTeLJSqdjjN/WebEgfPCpc:acFcAZhAVS2xpAeL4M5pP9type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: InternalName: FileVersion: 1.0.0.0CompanyName: LegalTrademarks: Comments: ProductName: ProductVersion: 1.0.0.0FileDescription: OriginalFilename: Translation: 0x0804 0x03a8

Strictor.34346 also known as:

MicroWorld-eScan	Gen:Variant.Strictor.34346
FireEye	Gen:Variant.Strictor.34346
McAfee	Artemis!4265DD74F504
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Gen:Variant.Strictor.34346
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Downloader-46660
GData	Gen:Variant.Strictor.34346
Kaspersky	not-a-virus:AdWare.Win32.Agent.xxdutf
Alibaba	Trojan:Win32/Tiggre.333741d5
NANO-Antivirus	Trojan.Win32.Hook.iaot
ViRobot	Trojan.Win32.Z.Strictor.3813888
AegisLab	Trojan.Multi.Generic.4!c
Tencent	Malware.Win32.Gencirc.10b84c6f
Endgame	malicious (moderate confidence)
Sophos	Mal/BackDr-X
Comodo	Malware@#3bqb46g5yles2
F-Secure	Adware.ADWARE/Agent.cnzgd
Baidu	Win32.Trojan.Legendmir.r
TrendMicro	TROJ_SPNV.01CP14
McAfee-GW-Edition	Generic PUP.fx
Emsisoft	Gen:Variant.Strictor.34346 (B)
Ikarus	Trojan.Crypt
Webroot	W32.Malware.Gen
Avira	ADWARE/Agent.cnzgd
MAX	malware (ai score=100)
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Strictor.D862A
ZoneAlarm	not-a-virus:AdWare.Win32.Agent.xxdutf
ALYac	Gen:Variant.Strictor.34346
Panda	Trj/CI.A
ESET-NOD32	a variant of Generik.JQVJYSW
TrendMicro-HouseCall	TROJ_SPNV.01CP14
Rising	Trojan.Win32.Generic.1584978B (C64:YzY0OhG8T7vLHss9)
Yandex	Trojan.CFI!vI8ffml9Vyk
Fortinet	W32/Generik.IALYETH!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.4f504e
Paloalto	generic.ml
MaxSecure	Trojan.Malware.7164915.susgen