How to remove “Hoax.PornoBlocker”?

The Hoax.PornoBlocker is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Hoax.PornoBlocker virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Hoax.PornoBlocker?


File Info:
crc32: 919799FB
md5: 216205d0c1a8a2a390b7fffcb2c52003
name: 216205D0C1A8A2A390B7FFFCB2C52003.mlw
sha1: 7f2f94dfb8963e0a6bb42823fad00fc4d68bf626
sha256: bd615589e5fa99ab21f6de9eb6fece91faf146de8ce103a36fe872b7f01be01b
sha512: 386fa83908c7d66e79902ca5aadd698f2a7a1b3a503da4bb376bdedc23c02ec2424206c379bab9489ace09084ac20505eb2b72059f35a25a9040feec8b752d23
ssdeep: 1536:XGLqJ3B+B0GQiTNfp7igOHUGuEIQDJcFf99K3r5eGfVlsg61lU:22J3B+SkA3r5/z6lU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: x642x627x631x626 x627x644x623x641x643x627x631
FileVersion: 1.00
CompanyName: x639x644x64a x627x644x633x639x64ax62f
ProductName: x642x627x631x626 x627x644x623x641x643x627x631
ProductVersion: 1.00
OriginalFilename: x642x627x631x626 x627x644x623x641x643x627x631.exe

Hoax.PornoBlocker also known as:

McAfee	GenericRXFT-RA!216205D0C1A8
Malwarebytes	Ransom.FileCryptor
VIPRE	Trojan.Win32.Generic!BT
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 00567b9a1 )
K7AntiVirus	Trojan ( 00567b9a1 )
Paloalto	generic.ml
NANO-Antivirus	Trojan.Win32.Taranis.ericvy
SUPERAntiSpyware	Trojan.Agent/Gen-Ransom
Zillya	Trojan.PornoBlocker.Win32.4206
McAfee-GW-Edition	GenericRXFT-RA!216205D0C1A8
Jiangmin	Trojan/PornoBlocker.dle
MAX	malware (ai score=95)
VBA32	Hoax.PornoBlocker
Cylance	Unsafe
Tencent	Malware.Win32.Gencirc.114964bb
Yandex	Trojan.GenAsa!qMYm8P+TzMY
Ikarus	Trojan-Ransom.PornoBlocker

How to remove Hoax.PornoBlocker?

Hoax.PornoBlocker removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X