Categories: Malware

Strictor.8385 removal guide

The Strictor.8385 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.8385 virus can do?

Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Deletes executed files from disk
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Strictor.8385?


File Info:
name: 02658D700DF20D5EEB39.mlwpath: /opt/CAPEv2/storage/binaries/3a772d308699b3fd543144086374c3ce15504b30b0c78ddccacc9f00befc0c1fcrc32: EBCC752Amd5: 02658d700df20d5eeb39c9e2d236036csha1: c6aaa23c4b52339443f07643ac73ee55a0382dabsha256: 3a772d308699b3fd543144086374c3ce15504b30b0c78ddccacc9f00befc0c1fsha512: b530b12d560e4ee8e6c37bef1b0924929d63970412d83cddc99a6da7e35a28110fb036679ec3cc12102ead3d59084155e243e776d3d31a24de61205540417416ssdeep: 768:PHcpCAPMyIgufxOCCqzCMUO+ClEYVTsgJRCXbJ2Z6fnJ/GneMG9nAc76BA:oOlyO+rtgJRQcZ6fJ/ueMBKvtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D153F752B68125B7EC2A9D3490D3EE3F5B20BC22D9211E5AC7C03E277831D62B925F57sha3_384: f597d5ab7940da76488be0758f7da3fb4c77ea289744b81a39559581365660e972d8736e3330dd054a9da36e8428d5eaep_bytes: 5589e583ec18c7042402000000ff15c8timestamp: 2011-05-29 14:34:50
Version Info:
CompanyName: 北京用友软件FileDescription: FileVersion: 6, 1, 7600, 16388InternalName: LegalCopyright: 北京用友软件 CopyRigth 2011LegalTrademarks: OriginalFilename: YONGYOU.exeProductName: 北京用友软件ProductVersion: 6.1.7600.16388Translation: 0x0804 0x04b0

Strictor.8385 also known as:

Lionic	Trojan.Win32.Dorifel.b!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.8385
ALYac	Gen:Variant.Strictor.8385
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Gen:Variant.Strictor.8385
Sangfor	Dropper.Win32.Agent.V5db
K7AntiVirus	Trojan ( 004cf0d91 )
Alibaba	TrojanDropper:Win32/Dorifel.7396b812
K7GW	Trojan ( 004cf0d91 )
Cybereason	malicious.00df20
Baidu	Win32.Trojan.QQSpy.b
VirIT	Trojan.Win32.Generic.AOWZ
Cyren	W32/Trojan.EGOC-8683
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDropper.Agent.QQH
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Strictor.8385
NANO-Antivirus	Trojan.Win32.Trojan-Dropper.ttmum
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10b5bb52
Emsisoft	Gen:Variant.Strictor.8385 (B)
F-Secure	Heuristic.HEUR/AGEN.1343129
DrWeb	Trojan.MulDrop3.55759
Zillya	Dropper.Dorifel.Win32.4759
TrendMicro	TROJ_GEN.R002C0PB523
McAfee-GW-Edition	GenericR-EHJ!02658D700DF2
FireEye	Generic.mg.02658d700df20d5e
Sophos	Mal/Generic-S
GData	Gen:Variant.Strictor.8385
Jiangmin	TrojanDropper.Dorifel.xp
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1343129
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Dropper]/Win32.Dorifel
Xcitium	Malware@#1t847veirchl
Arcabit	Trojan.Strictor.D20C1
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	GenericR-EHJ!02658D700DF2
TACHYON	Trojan-Dropper/W32.Dorifel.66560.B
VBA32	Trojan.Genome.xg
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0PB523
Rising	Dropper.Dorifel!8.31E (TFE:5:oOYoAnPc37M)
Yandex	Trojan.GenAsa!ZysSlWEUf0E
Ikarus	Trojan-Dropper.Win32.Dorifel
MaxSecure	Trojan.Malware.4086447.susgen
Fortinet	W32/Dorifel.BTJ!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)