Ransom Trojan

Trojan-Ransom.Win32.Blocker.iiqy removal guide

Malware Removal

The Trojan-Ransom.Win32.Blocker.iiqy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.iiqy virus can do?

  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Attempts to disable UAC
  • The sample wrote data to the system hosts file.
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.iiqy?


File Info:

crc32: 07C134C9
md5: 73f1a15297bf2eb773cd91ca8cbde049
name: 73F1A15297BF2EB773CD91CA8CBDE049.mlw
sha1: 784c9fd1188ddce481378254fb82029c62112f67
sha256: 3e1495aabc211cba394bc3adf5b2259549d5db8941ad066285be5c19267c7023
sha512: 3422aebaecbd89ce84300a03b0c0405fa2c160c5305d4f8c87f94e5f827e58c1b340fdb7cd92ef5ae51658f9fc373638f41a3d636f1df66dd231fa56e9df94b2
ssdeep: 1536:DHgtlVWd3jxokLjgEVOfffffffffffffffLGfNaB17GU07fffffMbbbbbbbNfff:DHg3cVi4jgEVQAaj75zbbbbbbbA
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

FileVersion: 1,0,0,0
ProductVersion: 1,0,0,0
Translation: 0x0000 0x04e4

Trojan-Ransom.Win32.Blocker.iiqy also known as:

LionicTrojan.Win32.Blocker.j!c
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.58079
SangforPUP.Win32.Dh.A
AlibabaRansom:Win32/Blocker.c65c57a9
Cybereasonmalicious.1188dd
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Blocker.iiqy
NANO-AntivirusTrojan.Win32.HostsChanger.edncpv
TencentWin32.Trojan.Blocker.Ajlp
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.gt
FireEyeGeneric.mg.73f1a15297bf2eb7
JiangminTrojanDropper.BATDrop.i
Antiy-AVLTrojan/Generic.ASMalwS.92C5D1
MicrosoftTrojan:Win32/Occamy.C
McAfeeArtemis!73F1A15297BF
MAXmalware (ai score=99)
VBA32Hoax.Blocker
PandaTrj/CI.A
YandexTrojan.Blocker!DYQaaBrm67s
IkarusWin32.SuspectCrc
MaxSecureTrojan.Malware.76915620.susgen
FortinetW32/Blocker.A!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HgIASOkA

How to remove Trojan-Ransom.Win32.Blocker.iiqy?

Trojan-Ransom.Win32.Blocker.iiqy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment