Ransom Trojan

How to remove “Trojan-Ransom.Win32.Blocker.mnno”?

Malware Removal

The Trojan-Ransom.Win32.Blocker.mnno is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.mnno virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Creates RWX memory
  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Ransom.Win32.Blocker.mnno?


File Info:

crc32: 94FC680D
md5: a123ea288cf8f682b92ed5360e33c7bd
name: images.exe
sha1: ebea422102b383d8f3a2a6fd549c21fd32f742eb
sha256: 6c36ba6efad78ce56fd6427fe30cb96797a4c354814405f4751ff204dab9a558
sha512: 13dd28b8dd156173d9787f64b2051b9602d722428523719bd0afc576abe16e276401b3215875cb496f7ca5c76b947d6d5d6c29fc6e1966b4ce221f68fc360ee9
ssdeep: 24576:oAOcZZXYQJWbUUCu7zxam1uk8NkLvrDzUWJ02OI:GBasBYkLvnzU+MI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.mnno also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanTrojan.GenericKD.42901544
FireEyeGeneric.mg.a123ea288cf8f682
CAT-QuickHealJAVA.RAT.Suspicious.A
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 004f11821 )
BitDefenderTrojan.GenericKD.42901544
K7GWTrojan ( 004f11821 )
Invinceaheuristic
SymantecTrojan.Gen.MBT
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.GenericKD.42901544
KasperskyTrojan-Ransom.Win32.Blocker.mnno
AlibabaRansom:Win32/Blocker.4f60cbd4
NANO-AntivirusTrojan.Java.Ratty.fmciga
TencentWin32.Trojan.Blocker.Lipv
Endgamemalicious (high confidence)
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Backdoor.tc
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.42901544 (B)
IkarusWin32.Outbreak
CyrenJava/Ratty.A.gen-cls!Camelot
WebrootW32.Blocker.Mnno
MAXmalware (ai score=88)
MicrosoftTrojan:Win32/Occamy.B
ArcabitTrojan.Generic.D28EA028
AegisLabTrojan.Win32.Blocker.j!c
ZoneAlarmTrojan-Ransom.Win32.Blocker.mnno
ALYacTrojan.GenericKD.42901544
PandaTrj/CI.A
Ad-AwareTrojan.GenericKD.42901544
AVGFileRepMetagen [Malware]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.Ransom.e09

How to remove Trojan-Ransom.Win32.Blocker.mnno?

Trojan-Ransom.Win32.Blocker.mnno removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment