Ransom Trojan

Trojan-Ransom.Win32.Blocker.ckeq (file analysis)

Malware Removal

The Trojan-Ransom.Win32.Blocker.ckeq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.ckeq virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan-Ransom.Win32.Blocker.ckeq?


File Info:

name: A4B46399F5E3669B1F38.mlw
path: /opt/CAPEv2/storage/binaries/f961954bdef2e5545ea5c5d87bbc6a06555c5b8ccbdf3288052ff3c40a0ce069
crc32: 1799B38A
md5: a4b46399f5e3669b1f38df252c6656a6
sha1: d7adc81cdc8fabb3a105b559a4a4c8d5fb08c14f
sha256: f961954bdef2e5545ea5c5d87bbc6a06555c5b8ccbdf3288052ff3c40a0ce069
sha512: bc49c16069e5aad3e87394f98e98d99d1acb14cfe86f4eb4d2c3db1ecdcc53a6204cd0212b3c8c4e99b2346ccb79c9235b2cd0b4220eb0da087d7b9492599576
ssdeep: 12288:nmRy+ZyYpaCDJFuPyAHcqrUKSx8rzN2GPA/7:Wy+ZymAHcte/Y/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18E059D82A2CA4CF2E5972E37C1D3EE3BF9A76DD42AD5111B21B27A7929333405E71113
sha3_384: 99ba542c37bb59adf8d1ff2a00f53b90fb4a328a54303397e67711ac2dd1e3e1d190167f40cc4fb8148dbc0a06143b7d
ep_bytes: 6a606870614000e87f030000bf940000
timestamp: 2009-03-19 17:31:48

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.ckeq also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.lvMt
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.470773
ClamAVWin.Trojan.Agent-538100
FireEyeGeneric.mg.a4b46399f5e3669b
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeBackDoor-EJG
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 003b31ad1 )
AlibabaRansom:Win32/Blocker.eac19cf3
K7GWTrojan ( 003b31ad1 )
Cybereasonmalicious.9f5e36
BaiduWin32.Worm.AutoRun.bj
VirITTrojan.Win32.Agent.DAF
CyrenW32/KillAV.M.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/AutoRun.Agent.TG
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Blocker.ckeq
BitDefenderGen:Variant.Zusy.470773
NANO-AntivirusTrojan.Win32.Drop.ihult
AvastWin32:WormX-gen [Wrm]
TencentTrojan-ransom.Win32.Blocker.ckeq
TACHYONTrojan/W32.Agent.827392.GB
EmsisoftGen:Variant.Zusy.470773 (B)
F-SecureTrojan.TR/Drop.Agent.ML
DrWebTrojan.MulDrop.46689
VIPREGen:Variant.Zusy.470773
TrendMicroTROJ_RENOS.SM
McAfee-GW-EditionBehavesLike.Win32.Infected.ch
Trapminemalicious.high.ml.score
SophosTroj/Dwonk-A
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Zusy.470773
JiangminTrojan/Scar.cym
AviraTR/Drop.Agent.ML
Antiy-AVLTrojan/Win32.Scar
XcitiumTrojWare.Win32.Scar.AB@1nhgxm
ArcabitTrojan.Zusy.D72EF5
ZoneAlarmTrojan-Ransom.Win32.Blocker.ckeq
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R583061
BitDefenderThetaAI:Packer.703476C221
ALYacGen:Variant.Graftor.89
MAXmalware (ai score=87)
VBA32Worm.Chydo
MalwarebytesMalware.AI.694764345
PandaGeneric Malware
TrendMicro-HouseCallTROJ_RENOS.SM
RisingTrojan.Generic@AI.100 (RDML:eEcJy4hKmp3jzi8UP4SbBg)
YandexTrojan.GenAsa!uxS0cK+M0EA
IkarusTrojan-Dropper.Win32.Dwonk
FortinetW32/Wacatac.B!tr
AVGWin32:WormX-gen [Wrm]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan-Ransom.Win32.Blocker.ckeq?

Trojan-Ransom.Win32.Blocker.ckeq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment