Ransom • Trojan

Trojan-Ransom.Win32.Blocker.ikrb removal instruction

The Trojan-Ransom.Win32.Blocker.ikrb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.ikrb virus can do?

Executable code extraction
Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.ikrb?


File Info:
crc32: 7EFFCF8F
md5: c727e0436f4657f67b815daa41d46d8e
name: C727E0436F4657F67B815DAA41D46D8E.mlw
sha1: 26c99770d6283c94db9bd5853ee8deefd084880c
sha256: f19414cce52cc52de7d6b022a5771ea9e0427c82911b3ea3d0cc82d5413cb6cd
sha512: b3d53ce1f4d69eb6536091459d8b11c0fe91a712b0b865a58e83018025832e547b65c37a09ef1c854f9cad9f37d820f9120b914c62e3ef5541784048d0fd1d45
ssdeep: 3072:Z7ZUGJz9XsXwCgDhWsoyC3uHsgbqSPzrRdbQzLOOibMy:Z7Z3PQwCgDhIyGuHsgbqSPzrRdbwLx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: WindowsUpdate32
FileVersion: 1.00
CompanyName: WindowsUpdate32
ProductName: WindowsUpdate32
ProductVersion: 1.00
OriginalFilename: WindowsUpdate32.exe

Trojan-Ransom.Win32.Blocker.ikrb also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader6.6145
MicroWorld-eScan	Gen:Application.Keylog.jm0@aekQZGoi
Qihoo-360	Win32/Application.Keylog.eaf
ALYac	Gen:Application.Keylog.jm0@aekQZGoi
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.RShot.m!c
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Application.Keylog.jm0@aekQZGoi
K7GW	Riskware ( 0015e4f11 )
K7AntiVirus	Riskware ( 0015e4f11 )
BitDefenderTheta	AI:Packer.E4619B821F
Symantec	Trojan.Gen
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.ikrb
NANO-Antivirus	Trojan.Win32.Dwn.rgctt
ViRobot	Backdoor.Win32.A.RShot.151552.C
Tencent	Malware.Win32.Gencirc.114c51b2
Ad-Aware	Gen:Application.Keylog.jm0@aekQZGoi
Emsisoft	Gen:Application.Keylog.jm0@aekQZGoi (B)
Comodo	TrojWare.Win32.Injector.AVMM@56kyl1
F-Secure	Trojan.TR/Spy.Gen
Zillya	Backdoor.RShot.Win32.1632
TrendMicro	TSPY_VBKLOG.SMIB
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cm
FireEye	Generic.mg.c727e0436f4657f6
Sophos	ML/PE-A + Keylogger (PUA)
Jiangmin	Backdoor.RShot.am
Avira	TR/Spy.Gen
Antiy-AVL	Trojan[Backdoor]/Win32.RShot
Microsoft	Trojan:Win32/Dynamer!dtc
Arcabit	Application.Keylog.E37CBE
ZoneAlarm	Trojan-Ransom.Win32.Blocker.ikrb
GData	Gen:Application.Keylog.jm0@aekQZGoi
Cynet	Malicious (score: 85)
McAfee	Artemis!C727E0436F46
MAX	malware (ai score=76)
Panda	Generic Malware
TrendMicro-HouseCall	TSPY_VBKLOG.SMIB
Rising	Ransom.Blocker!8.12A (CLOUD)
Yandex	Backdoor.RShot!G0Bj4fTZc0E
Ikarus	Backdoor.Win32.RShot
AVG	Win32:Malware-gen
Cybereason	malicious.36f465
MaxSecure	Trojan.Malware.2588.susgen

How to remove Trojan-Ransom.Win32.Blocker.ikrb?

Trojan-Ransom.Win32.Blocker.ikrb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X