Ransom Trojan

Trojan-Ransom.Win32.Blocker.mwau removal guide

Malware Removal

The Trojan-Ransom.Win32.Blocker.mwau is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.mwau virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Korean

How to determine Trojan-Ransom.Win32.Blocker.mwau?


File Info:

crc32: 0FA83B4E
md5: 82a5213f7a09c3f01e74c5ecdee835ea
name: 82A5213F7A09C3F01E74C5ECDEE835EA.mlw
sha1: 9097b4d2277a8bfb2e9c264fad188904a95b8e0d
sha256: 5349613023a556b0d22e5321751d9778f3cba383b953701407a6ad8b2718c4b1
sha512: 6a5290b9122df931a37df914901a2f1648ce269e6302555b4f76e53639e77d76f81e71236b08ca2b588a49315c9f910d4eef8bb84fafa537a8b3be5852aa123f
ssdeep: 1536:trae78zjORCDGwfdCSog01313cs5gy8mWq6mxdYOHWl/i8jDolfKb7:jahKyd2n31V5zFWlmlfKb7
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract
FileVersion: 11.00.19041.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.19041.1
FileDescription: Win32 Cabinet Self-Extractor
OriginalFilename: WEXTRACT.EXE .MUI
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.Blocker.mwau also known as:

DrWebTrojan.KillProc2.15633
McAfeeArtemis!82A5213F7A09
ZillyaTrojan.Blocker.Win32.71185
SymantecTrojan.Gen.MBT
CynetMalicious (score: 99)
KasperskyTrojan-Ransom.Win32.Blocker.mwau
AlibabaRansom:Win32/Blocker.4af70581
McAfee-GW-EditionArtemis
AviraTR/Blocker.cmyvo
AegisLabTrojan.Win32.Blocker.j!c
RisingRansom.Blocker!8.12A (CLOUD)
YandexTrojan.Agent!5knfXlRKm2M
FortinetW32/PossibleThreat
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HgEASSUA

How to remove Trojan-Ransom.Win32.Blocker.mwau?

Trojan-Ransom.Win32.Blocker.mwau removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment