About "Trojan-Ransom.Win32.Blocker.lcuq" infection

The Trojan-Ransom.Win32.Blocker.lcuq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.lcuq virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Blocker.lcuq?


File Info:
crc32: 6B5F2CFB
md5: 744c1aea8ae12fd0dabc24e87b168dba
name: 744C1AEA8AE12FD0DABC24E87B168DBA.mlw
sha1: fadb955021eb6e0d0c9305789b88ee135338703c
sha256: bbf3c5917272f881eb3e7447326460b8223f3f55ef8484d78190681c13d42287
sha512: b925c957ff4eb9dcb285f5d7cee5e2b0f72fef69b8b96236f22597ae272b7d60b3569f549886b80b340ee32669ef0dce90a9d9ced0366b60e6bb996f7c2ce652
ssdeep: 6144:Z61jSS69R1sw9CNcbe+N0NYpoHh0ulNHP:+SS6pp9C2mNYpeSu7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: TOURCEfiRe, vnA.
InternalName: Boasted0
FileVersion: 9.06
CompanyName: SamsTUdiO CROui
LegalTrademarks: THUNderbirD
Comments: BC
ProductName: aUDACITY Soax
ProductVersion: 9.06
FileDescription: zaNON
OriginalFilename: Boasted0.exe

Trojan-Ransom.Win32.Blocker.lcuq also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00538be91 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Tspy-6916197-0
ALYac	Gen:Heur.PonyStealer.Tm0@dC!EUkii
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Ransom:Win32/Blocker.ba0add24
K7GW	Trojan ( 00538be91 )
Cybereason	malicious.a8ae12
Cyren	W32/Fareit.FW.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.DZKH
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.lcuq
BitDefender	Gen:Heur.PonyStealer.Tm0@dC!EUkii
NANO-Antivirus	Trojan.Win32.Blocker.ffrszz
MicroWorld-eScan	Gen:Heur.PonyStealer.Tm0@dC!EUkii
Tencent	Win32.Trojan.Blocker.Afro
Ad-Aware	Gen:Heur.PonyStealer.Tm0@dC!EUkii
Sophos	Mal/Generic-R
Comodo	Malware@#vwek75lytn0j
BitDefenderTheta	Gen:NN.ZevbaF.34796.Tm0@aC!EUkii
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win32.BAMAPANO.SM3.hp
Emsisoft	Trojan.Injector (A)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1124490
eGambit	Unsafe.AI_Score_100%
ZoneAlarm	Trojan-Ransom.Win32.Blocker.lcuq
AhnLab-V3	Trojan/Win32.Injector.R232750
VBA32	BScope.Trojan.Cloxer
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.BAMAPANO.SM3.hp
Rising	Trojan.Injector!1.B353 (CLASSIC)
Yandex	Trojan.Blocker!ZKLzQxWPvK4
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.DZJW!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HwMAEpsA

How to remove Trojan-Ransom.Win32.Blocker.lcuq?

Trojan-Ransom.Win32.Blocker.lcuq removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan-Ransom.Win32.Blocker.lcuq” infection