Categories: RansomTrojan

About “Trojan-Ransom.Win32.Blocker.kldc” infection

The Trojan-Ransom.Win32.Blocker.kldc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.kldc virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
diabs.ddns.net

How to determine Trojan-Ransom.Win32.Blocker.kldc?


File Info:

crc32: E2907B2Cmd5: 78d8a0f635dd1a22ce526150f0161674name: 78D8A0F635DD1A22CE526150F0161674.mlwsha1: 97d342a69d68aa94b4371c55557654d3236aa589sha256: 6259cb5edbe12d377c7a3a81c9673c95f8c107009378a78466f1bd9c589c3ab8sha512: 473c7cb05d0be713615fe91c0dc685f23dbe2db2fdc3dea5f2dcd2e03d53a318e02ff6ae490e77efe4049979305ad6ed23692058590d75c81bcb20865eebfe62ssdeep: 768:0bOhuZOCgvWJj8WmVGiAv7C56M2hhkTjRmiJ4QusAO:qOwYCgfBjRVJ4ZsAOtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.kldc also known as:

K7AntiVirus Trojan ( 004d65011 )
Lionic Trojan.Win32.Blocker.j!c
Elastic malicious (high confidence)
DrWeb Trojan.DownLoader25.59408
Cynet Malicious (score: 99)
Cylance Unsafe
Zillya Trojan.Blocker.Win32.39212
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
K7GW Trojan ( 004d65011 )
Cybereason malicious.635dd1
Baidu MSIL.Backdoor.Bladabindi.a
Cyren W32/MSIL_Agent.CP.gen!Eldorado
Symantec Backdoor.Ratenjay
ESET-NOD32 a variant of MSIL/Bladabindi.AH
APEX Malicious
Avast Win32:Malware-gen
Kaspersky Trojan-Ransom.Win32.Blocker.kldc
BitDefender Gen:Heur.MSIL.Bladabindi.1
NANO-Antivirus Trojan.Win32.Bladabindi.euxicw
MicroWorld-eScan Gen:Heur.MSIL.Bladabindi.1
Tencent Win32.Trojan.Blocker.Akpk
Ad-Aware Gen:Heur.MSIL.Bladabindi.1
Sophos Mal/Generic-S
BitDefenderTheta Gen:NN.ZemsilF.34050.cm0@aiatnye
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition Generic.crw
FireEye Generic.mg.78d8a0f635dd1a22
Emsisoft Gen:Heur.MSIL.Bladabindi.1 (B)
SentinelOne Static AI – Malicious PE
Avira TR/Dropper.Gen7
Antiy-AVL Trojan/Generic.ASMalwS.229BF6F
Microsoft Backdoor:MSIL/Bladabindi.AJ
Arcabit Trojan.MSIL.Bladabindi.1
GData Gen:Heur.MSIL.Bladabindi.1
AhnLab-V3 Trojan/Win32.Bladabindi.C1930977
McAfee Generic.crw
MAX malware (ai score=100)
VBA32 Trojan-Ransom.Blocker
Malwarebytes Backdoor.NJRat
Panda Trj/GdSda.A
Yandex Trojan.Blocker!iRCRdjAi+js
Ikarus Worm.MSIL.Bladabindi
Fortinet MSIL/Bladabindi.AH!worm
AVG Win32:Malware-gen
Paloalto generic.ml
Qihoo-360 Win32/Backdoor.NjRAT.HgIASOkA

How to remove Trojan-Ransom.Win32.Blocker.kldc?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/Kryptik.ALJI removal instruction

The MSIL/Kryptik.ALJI is considered dangerous by lots of security experts. When this infection is active,…

1 min ago

About “Lazy.477826” infection

The Lazy.477826 is considered dangerous by lots of security experts. When this infection is active,…

1 min ago

What is “Fragtor.369452”?

The Fragtor.369452 is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

About “Jalapeno.2067” infection

The Jalapeno.2067 is considered dangerous by lots of security experts. When this infection is active,…

7 mins ago

Malware.AI.4222225806 malicious file

The Malware.AI.4222225806 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Malware.AI.1862100968 removal guide

The Malware.AI.1862100968 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago