Categories: RansomTrojan

Trojan-Ransom.Win32.Blocker.ljpw information

The Trojan-Ransom.Win32.Blocker.ljpw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.ljpw virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Blocker.ljpw?


File Info:
crc32: 95FB710Amd5: 7368657baf850ecfd5d70e1f8e2a0fcdname: 7368657BAF850ECFD5D70E1F8E2A0FCD.mlwsha1: 70ec9d06ecd975708e1589da9900a75c8846e843sha256: 4fcf6a0b40b045b1ce5c37c912989ad0f8a26f5eb18dde467ab5565c09b90792sha512: a54bf8e35f1209b4a6f22eccbda4ff95071791c870c7b5b88f7c511f66b4c3e2055ee9b6dfebe02154898e494244eb3614927a1144537b9e7d890915301ded8assdeep: 12288:jEqCvQVzQPb7AjQmMFQ4ShrzOXRqHP77sdhiM7tL7JZ5m3V1Y/np7pvZpH:uvqzQPb7AEIZ0qHP74hR7tJZ5+V1Y/n/type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: Hallvard6InternalName: CORYNEUM3FileVersion: 1.03.0008LegalTrademarks: DAMIOLI3ProductName: suplee8ProductVersion: 1.03.0008FileDescription: gruelly9OriginalFilename: CORYNEUM3.exe

Trojan-Ransom.Win32.Blocker.ljpw also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.50498
FireEye	Generic.mg.7368657baf850ecf
ALYac	Trojan.GenericKDZ.50498
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.40906
AegisLab	Trojan.Win32.Blocker.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005400ad1 )
BitDefender	Trojan.GenericKDZ.50498
K7GW	Trojan ( 005400ad1 )
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/VBKrypt.GJ.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:DangerousSig [Trj]
ClamAV	Win.Dropper.HawkEye-9798294-0
Kaspersky	Trojan-Ransom.Win32.Blocker.ljpw
Alibaba	Ransom:Win32/Blocker.098da34c
NANO-Antivirus	Trojan.Win32.Blocker.fkejxo
Rising	Ransom.Blocker!8.12A (CLOUD)
Ad-Aware	Trojan.GenericKDZ.50498
Emsisoft	Trojan.GenericKDZ.50498 (B)
Comodo	Malware@#2okby497ulb2t
F-Secure	Heuristic.HEUR/AGEN.1132216
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_LOKI.THAAOIAH
McAfee-GW-Edition	Fareit-FMY!7368657BAF85
Sophos	Mal/Generic-R + Mal/FareitVB-R
Ikarus	Trojan.VB.Crypt
Jiangmin	Trojan.Blocker.pwd
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1132216
eGambit	Unsafe.AI_Score_100%
MAX	malware (ai score=100)
Microsoft	Trojan:Win32/Vibem.O
Arcabit	Trojan.Generic.DC542
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
ZoneAlarm	Trojan-Ransom.Win32.Blocker.ljpw
GData	Trojan.GenericKDZ.50498
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrypt.RP08.X1976
McAfee	Fareit-FMY!7368657BAF85
VBA32	BScope.Trojan.Fuerboos
Malwarebytes	Trojan.MalPack.VB
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.EBIF
TrendMicro-HouseCall	TSPY_LOKI.THAAOIAH
Tencent	Win32.Trojan.Inject.Auto
Yandex	Trojan.GenAsa!X9yOLsGsgSQ
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.74099702.susgen
Fortinet	W32/GenKryptik.CPNE!tr
BitDefenderTheta	Gen:NN.ZevbaF.34590.8m1@aS2RVVoi
AVG	Win32:DangerousSig [Trj]
Cybereason	malicious.baf850
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.85f