Ransom • Trojan

How to remove “Trojan-Ransom.Win32.Blocker.hzdt”?

The Trojan-Ransom.Win32.Blocker.hzdt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.hzdt virus can do?

Unconventionial language used in binary resources: Indonesian

How to determine Trojan-Ransom.Win32.Blocker.hzdt?


File Info:
crc32: 0572071F
md5: 4c8e6581f9cb4fb3cc4e9bf41513d5b2
name: 4C8E6581F9CB4FB3CC4E9BF41513D5B2.mlw
sha1: 484992bbd0294d2214f0f54740572711a26c8d8c
sha256: aa97e92ebbe275bf5b337b228113c57a90070356120ad03eee4ff7754cfea743
sha512: 76a3a9f28164dc46aa59f5705954ae24f34645675bd7e205d47c41186b76c807a1283bdab0eee0001869045969d8877ea9ae869d5a9b9c6f62946ae32beaf003
ssdeep: 12288:XI2YJEtSRrorgwTwazW+7GF33833PBKKK2KKKQKKZKKeHHHTHHH8///////BNw:XtYJVuEwq33833PBKKK2KKKQKKZKKeH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2001-2004 CaesarSOFT Inc.
InternalName: 
FileVersion: 6.0.9.1276
CompanyName: CaesarSOFT
LegalTrademarks: 
Comments: visit http://www.caesarsoft.com
ProductName: CyberBilling
ProductVersion: XP
FileDescription: CyberBilling Client
OriginalFilename: CyberClient
Translation: 0x0421 0x04e4

Trojan-Ransom.Win32.Blocker.hzdt also known as:

Bkav	W32.AIDetect.malware1
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.33534
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Cybereason	malicious.bd0294
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan-Ransom.Win32.Blocker.hzdt
Alibaba	Ransom:Win32/Blocker.71734f54
SUPERAntiSpyware	Trojan.Agent/Generic
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.PkdMorphine.~AN@1l4q0o
BitDefenderTheta	Gen:NN.ZelphiF.34738.Oq0@aW1UgqpG
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Infected.jm
FireEye	Generic.mg.4c8e6581f9cb4fb3
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Blocker.bbb
Webroot	W32.Trojan.GenKD
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.1144D97
TACHYON	Ransom/W32.DP-Blocker.669696
Acronis	suspicious
McAfee	GenericRXBS-PE!4C8E6581F9CB
MAX	malware (ai score=94)
VBA32	Trojan-Ransom.Blocker
Yandex	Trojan.Blocker!bI3lRDhAAJQ
Ikarus	Flooder.Win32.Misoska

How to remove Trojan-Ransom.Win32.Blocker.hzdt?

Trojan-Ransom.Win32.Blocker.hzdt removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X