Categories: RansomTrojan

Trojan-Ransom.Win32.Blocker.kbup removal

The Trojan-Ransom.Win32.Blocker.kbup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.kbup virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Starts servers listening on 0.0.0.0:29138, 0.0.0.0:64117
A process created a hidden window
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Attempts to identify installed AV products by registry key
Anomalous binary characteristics

Related domains:

n.paratozix.net

k.paratozix.net

How to determine Trojan-Ransom.Win32.Blocker.kbup?


File Info:
crc32: D14D0CD0md5: b04ed3cf7057c9a8e6826bab27bfb7ccname: B04ED3CF7057C9A8E6826BAB27BFB7CC.mlwsha1: c2990dd21b45d6915bbd051b90474848b4efb7f6sha256: 0f2e366b7e068f82a75bce0bbdd1d09c1185c828a218462f028b566d4dc0688esha512: a3c607fa61503a8d80f94aab1e9bba930e5adfe79a2c7690629cae487e0d061dd363c6c0a8df3da885afb06caefcf9f06e708fd22a64c7d19e619866dae69f41ssdeep: 768:ZHL4rnL7Ja9ibPF3RByGdXmZlVL7y56Teay9kzTCyDpKpT9yqx7/8+LKlw6g7Lf:JL4rnNBKlt+ayWS+gJ9NRr6D3zltype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan-Ransom.Win32.Blocker.kbup also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Proxy-Program ( 004a98041 )
Lionic	Trojan.Win32.Blocker.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed
ClamAV	Win.Malware.Razy-7139871-0
McAfee	GenericRXBW-SX!B04ED3CF7057
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Bunitu.ali1000105
K7GW	Proxy-Program ( 004a98041 )
Cybereason	malicious.f7057c
Symantec	Trojan.Smallprox
ESET-NOD32	a variant of Win32/TrojanProxy.Agent.NYH
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.kbup
BitDefender	Gen:Variant.Razy.774960
NANO-Antivirus	Trojan.Win32.Crypted.eptbct
MicroWorld-eScan	Gen:Variant.Razy.774960
Tencent	Malware.Win32.Gencirc.11498d41
Ad-Aware	Gen:Variant.Razy.774960
Sophos	Mal/Generic-S
Comodo	Malware@#2laazgbsd0xb
F-Secure	Heuristic.HEUR/AGEN.1111630
BitDefenderTheta	Gen:NN.ZexaF.34170.guW@a8xA1oai
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Autorun.cm
FireEye	Generic.mg.b04ed3cf7057c9a8
Emsisoft	Gen:Variant.Razy.774960 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Blocker.hav
Avira	HEUR/AGEN.1111630
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	Trojan[Ransom]/Win32.Blocker
Microsoft	TrojanDropper:Win32/Bunitu.K!bit
Arcabit	Trojan.Razy.DBD330
SUPERAntiSpyware	Trojan.Agent/Gen-Troprox
ZoneAlarm	Trojan-Ransom.Win32.Blocker.kbup
GData	Gen:Variant.Razy.774960
AhnLab-V3	Trojan/Win32.Blocker.R202198
VBA32	BScope.Trojan.Agent
MAX	malware (ai score=89)
Malwarebytes	Trojan.Dropper
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_Blocker.R002C0DIU21
Rising	Trojan.Generic@ML.97 (RDML:wWDXGcLOg2nQEVXuWFloTA)
Yandex	Trojan.GenAsa!u41awMbg7bk
Ikarus	Trojan-Proxy.Agent
Fortinet	W32/Generic.AP.85CA82!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml