What is "Trojan-Ransom.Win32.Blocker.lamw"?

The Trojan-Ransom.Win32.Blocker.lamw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.lamw virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Blocker.lamw?


File Info:
crc32: DA825007
md5: da115f08927b89fa23a4af91244f6080
name: DA115F08927B89FA23A4AF91244F6080.mlw
sha1: 03de4d6917d680a18529bb4f1fa95aca531e2437
sha256: b068afae6427c4de2299bdad733e30084a1a16278170ae1877b5097c2ed46630
sha512: dadc81235d60f80eb325f8836c2bce8aa274ea7c73372b55e0be19956dcfe62b0cb595be620d4e596e1b954d3376622c41a8f68e7ccd5566eddc5d6f12002f87
ssdeep: 768:0ANQvCB2qjEwY1nQihx8pgRtRZo+u1Cd+s35M:DmqEqjrYNLKgRaCws5M
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Server.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Server.exe

Trojan-Ransom.Win32.Blocker.lamw also known as:

Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.30828911
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.39923
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.GenericKD.30828911
Cybereason	malicious.8927b8
Cyren	W32/MSIL_Bladabindi.AA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Small.FD
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.lamw
NANO-Antivirus	Trojan.Win32.Blocker.fcnsuo
MicroWorld-eScan	Trojan.GenericKD.30828911
Tencent	Win32.Trojan.Blocker.Wqmj
Ad-Aware	Trojan.GenericKD.30828911
Sophos	Mal/Generic-S
Comodo	Malware@#2j1pujv7wap08
BitDefenderTheta	Gen:NN.ZemsilF.34758.bm0@aat@p5d
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.nm
FireEye	Generic.mg.da115f08927b89fa
Emsisoft	Trojan.GenericKD.30828911 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Blocker.ilh
Avira	TR/ATRAPS.Gen
eGambit	Unsafe.AI_Score_97%
Microsoft	Trojan:Win32/Dynamer!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.30828911
McAfee	Artemis!DA115F08927B
MAX	malware (ai score=97)
Malwarebytes	Trojan.Agent
Panda	Trj/GdSda.A
Yandex	Trojan.Blocker!3kRmEAr/r2o
Ikarus	Trojan-Dropper.MSIL
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Small.FB!tr
Paloalto	generic.ml

How to remove Trojan-Ransom.Win32.Blocker.lamw?

Trojan-Ransom.Win32.Blocker.lamw removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan-Ransom.Win32.Blocker.lamw”?