Should I remove “Trojan.PinkblockerRI.S14778442”?

The Trojan.PinkblockerRI.S14778442 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.PinkblockerRI.S14778442 virus can do?

Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.PinkblockerRI.S14778442?


File Info:
crc32: 0D5F5C8A
md5: 7d02a3746a86622b9f4c9fd1a97e61f5
name: 7D02A3746A86622B9F4C9FD1A97E61F5.mlw
sha1: 670b7a2eefda91454e8b91ea2a7ee9d8cbe8f195
sha256: b017818a2129e911c2b9b900bba06cea18f123e02caee0cf6b08c01cdb5884fa
sha512: 8d8d3ebecb36c73718848e77b39f310d8cbdfe40cb722f18fba996d477b6521541b97cdd9870b36860f1b157ed5596a0a6249ea9bed53a612775b8035163ea6d
ssdeep: 768:XBgnQxqghruXNHXLtwrbigaxC8P2tL6lRqyTgP:XKHZhEta48P2OLT6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2009
InternalName: kstywpcnauf
FileVersion: 5, 131, 125, 1111
ProductName: kstywpcnauf
ProductVersion: 5, 131, 125, 1111
FileDescription: kstywpcnauf
OriginalFilename: kstywpcnauf
Translation: 0x0419 0x04b0

Trojan.PinkblockerRI.S14778442 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Winlock.13154
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.PinkblockerRI.S14778442
ALYac	Gen:Variant.Symmi.65063
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Bojotuc.6fc141b1
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.46a866
Cyren	W32/S-8b00cf7e!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Symmi.65063
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Variant.Symmi.65063
Tencent	Win32.Risk.Adware.Ahok
Ad-Aware	Gen:Variant.Symmi.65063
BitDefenderTheta	Gen:NN.ZexaF.34758.cu0@aWRzmCck
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.7d02a3746a86622b
Emsisoft	Gen:Variant.Symmi.65063 (B)
Jiangmin	Trojan/PinkBlocker.ayg
Avira	ADWARE/Adware.Gen3
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.189A43D
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Bojotuc.A
Arcabit	Trojan.Symmi.DFE27
AegisLab	Trojan.Multi.Generic.4!c
GData	Gen:Variant.Symmi.65063
McAfee	Artemis!7D02A3746A86
MAX	malware (ai score=99)
VBA32	Trojan.Winlock
Malwarebytes	Malware.AI.1858961833
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.93 (RDML:Ey4wH01/vLXFVJ1/okrALQ)
Yandex	Trojan.Winlock!u5yx6DiJtyI
Ikarus	Trojan-Ransom.PinkBlocker
Fortinet	W32/PinkBlocker.A!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan.PinkblockerRI.S14778442?

Trojan.PinkblockerRI.S14778442 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X