Ransom Trojan

What is “Trojan-Ransom.Win32.Blocker.jhhg”?

Malware Removal

The Trojan-Ransom.Win32.Blocker.jhhg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.jhhg virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Attempts to create or modify a Browser Helper Object
  • Attempts to modify browser security settings
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.jhhg?


File Info:

crc32: C538EE34
md5: 70a616af8e6a8cf407d595b96cf2041f
name: 70A616AF8E6A8CF407D595B96CF2041F.mlw
sha1: 28ddc93406d3d4a9973111e1b47a26861171db74
sha256: 883bb14a4b1eb0f7d265f857a0b9fbd228383f135aee4c00bba11d1f254c0c23
sha512: 7a82eda0bb3a773fc0fbbb535ab03acf1d9dd3b386a8b65076e94d5d8ddc2286dec277323221385868497c0703bfdbd3be3295cb09910dd7846629293e2a3428
ssdeep: 24576:CEDkaYizS2hGFyFZYsXbD6II496lnLO24Ndkf3ZuNMQfKyJVa3PHawv57IE4:5keaFEZYs3YC6lnLO22dyMNMQfQPawv
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.jhhg also known as:

CylanceUnsafe
ZillyaTrojan.Blocker.Win32.35067
Cybereasonmalicious.406d3d
APEXMalicious
KasperskyTrojan-Ransom.Win32.Blocker.jhhg
AlibabaRansom:Win32/Blocker.2baead79
ViRobotAdware.SharpfileManger.1376768
TencentWin32.Trojan.Blocker.Agla
ComodoSuspicious@#nkyp5polxvws
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.70a616af8e6a8cf4
AegisLabTrojan.Win32.Blocker.j!c
McAfeeArtemis!70A616AF8E6A
VBA32Trojan-Ransom.Blocker
RisingTrojan.Generic@ML.80 (RDML:Doq8fpCc+k/9qq6De1TcaQ)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Blocker.JHHG!tr
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Blocker.jhhg?

Trojan-Ransom.Win32.Blocker.jhhg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment