Ransom Trojan

Trojan-Ransom.Win32.Blocker.ljas removal guide

Malware Removal

The Trojan-Ransom.Win32.Blocker.ljas is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.ljas virus can do?

  • Starts servers listening on 0.0.0.0:1054
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.ljas?


File Info:

crc32: D7B03F3B
md5: 0eb8f16c15ea6e9e21f1f579a57ece84
name: 0EB8F16C15EA6E9E21F1F579A57ECE84.mlw
sha1: 505275346a23daf19bb35fe87d71e69a1b08a140
sha256: b0caca64c998254463e193a0e1b10f9ccbc1110c9b421dfe64229972fbd02bed
sha512: b31251da77933d781dea4b8938bf2bc7b488baf8d810585a05a5d912276230b7b5159c22874a5d5e7364b2c1e10b185b05eb6ef1bb57e7ea4ba02b12a872e521
ssdeep: 1536:jtGrXBY7KdRRmWGK3Kyvah7tjuJIubEkQLWjceWrpsWjcdDOeVqL:jtGrXkKdapUCh7tjY/NxyeVq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.ljas also known as:

CynetMalicious (score: 99)
ALYacGen:Heur.Mint.Zard.1
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.40806
SangforRansom.Win32.Blocker.ljas
AlibabaRansom:Win32/Blocker.e886dc62
Cybereasonmalicious.c15ea6
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Blocker.ljas
BitDefenderGen:Heur.Mint.Zard.1
MicroWorld-eScanGen:Heur.Mint.Zard.1
TencentWin32.Trojan.Blocker.Jmm
Ad-AwareGen:Heur.Mint.Zard.1
SophosMal/Generic-S
ComodoMalware@#w8hktqvf52rx
BitDefenderThetaGen:NN.ZexaF.34758.fuW@aqmfjJik
McAfee-GW-EditionBehavesLike.Win32.Dropper.mh
FireEyeGeneric.mg.0eb8f16c15ea6e9e
EmsisoftGen:Heur.Mint.Zard.1 (B)
JiangminTrojan.Blocker.jbh
AviraTR/Blocker.kjgjr
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Mint.Zard.1
ZoneAlarmTrojan-Ransom.Win32.Blocker.ljas
GDataGen:Heur.Mint.Zard.1
AhnLab-V3Malware/Win32.Generic.C2830229
McAfeeArtemis!0EB8F16C15EA
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.Blocker
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.81 (RDML:vuZMFG1u+iXXiZdlL8IiTg)
YandexTrojan.Blocker!lndw9VrslcE
FortinetW32/Blocker.LJAS!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Blocker.ljas?

Trojan-Ransom.Win32.Blocker.ljas removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment