Ransom Trojan

Trojan-Ransom.Win32.Blocker.pfqb removal

Malware Removal

The Trojan-Ransom.Win32.Blocker.pfqb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.pfqb virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

sunray1975.zapto.org

How to determine Trojan-Ransom.Win32.Blocker.pfqb?


File Info:

crc32: C0072A45
md5: 0027005441b6548bae2fe719c766a789
name: 0027005441B6548BAE2FE719C766A789.mlw
sha1: 7665780fa898e37a680643c8671b61f4420a954e
sha256: 6f5b027012a450288191d2fa5704d616990c1857871af96483a14bcbb549a8e3
sha512: 5644b9e3f5cd6057936f0f0c9611893eb3504a25df2183eff253fa7add220ed1a9259861e12ad01d51d10fd9f3f6c06807185ca0ddc8f62be993810190cb8cb8
ssdeep: 196608:8Eazg7DSmEazg7DSmEazg7DSmEazg7DSN:Wg7ucg7ucg7ucg7uN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.pfqb also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00548e051 )
LionicTrojan.Win32.Blocker.j!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader6.7779
CynetMalicious (score: 100)
CAT-QuickHealTrojan.WacatacPMF.S16755091
ALYacGen:Variant.Symmi.34741
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Starter.ali1001008
K7GWTrojan ( 00548e051 )
Cybereasonmalicious.441b65
CyrenW32/Injector.OZVT-2500
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.AHHO
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:MBRlock-DV [Trj]
ClamAVWin.Trojan.Mbrlock-9779766-0
KasperskyTrojan-Ransom.Win32.Blocker.pfqb
BitDefenderGen:Variant.Symmi.34741
NANO-AntivirusTrojan.Win32.Dapato.bsjzfg
ViRobotTrojan.Win32.Z.Injector.8317440.BCG
MicroWorld-eScanGen:Variant.Symmi.34741
TencentTrojan.Win32.Blocker.zg
Ad-AwareGen:Variant.Symmi.34741
SophosMal/Generic-S
ComodoTrojWare.Win32.Injector.HO@82j6jo
BitDefenderThetaAI:Packer.DC953A6A21
TrendMicroTROJ_GEN.R002C0PJU21
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
FireEyeGeneric.mg.0027005441b6548b
EmsisoftGen:Variant.Symmi.34741 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Blocker.trx
AviraHEUR/AGEN.1114900
Antiy-AVLTrojan/Generic.ASMalwS.30F91B2
MicrosoftTrojan:Win32/Fareit!ml
GDataWin32.Trojan.PSE.1D0PRQS
TACHYONRansom/W32.Blocker.8317440
AhnLab-V3Dropper/Win32.Dapato.R83155
McAfeeGenericRXIP-BJ!0027005441B6
MAXmalware (ai score=81)
VBA32TrojanRansom.Blocker
MalwarebytesTrojan.Injector
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PJU21
RisingTrojan.Injector!1.DA56 (CLASSIC)
YandexTrojan.Injector!6XR9EGb/HqY
IkarusTrojan-Ransom.Blocker
MaxSecureTrojan.Malware.124870659.susgen
FortinetW32/Injector.AHHO!tr
AVGWin32:MBRlock-DV [Trj]
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Blocker.pfqb?

Trojan-Ransom.Win32.Blocker.pfqb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment