Ransom Trojan

Trojan-Ransom.Win32.Blocker.qcio malicious file

Malware Removal

The Trojan-Ransom.Win32.Blocker.qcio is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.qcio virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
sunray1975.zapto.org

How to determine Trojan-Ransom.Win32.Blocker.qcio?


File Info:

crc32: 1B83EDA7
md5: 483aea8feeb82d3b2e011c487baf1afe
name: 483AEA8FEEB82D3B2E011C487BAF1AFE.mlw
sha1: 9dffa59c48de1549c224fdcbcbafb4e605d5766d
sha256: 0106dc196c0bc6d4dcc695c1c0df002acec074fc874f82f580d7fd736a8bf509
sha512: 2ce0577c0fb63fa4c0e536660579b70caac1f1be98a4ff79ecc90a9dcc10717a86faaf8612ec57e6f51db3c03d688188992badaa1d21ccff2580d46ce9e30a68
ssdeep: 196608:8Xazg7DSmXazg7DSmXazg7DSmXazg7DSN:7g7u1g7u1g7u1g7uN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.qcio also known as:

K7AntiVirusTrojan ( 00548e051 )
LionicTrojan.Win32.Blocker.j!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader6.7779
ClamAVWin.Trojan.Mbrlock-9779766-0
CAT-QuickHealTrojan.IgenericPMF.S16782252
ALYacGen:Variant.Symmi.34741
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Starter.ali1001008
K7GWTrojan ( 00548e051 )
Cybereasonmalicious.feeb82
CyrenW32/Injector.OZVT-2500
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.AHHO
APEXMalicious
AvastWin32:MBRlock-DV [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Blocker.qcio
BitDefenderGen:Variant.Symmi.34741
NANO-AntivirusTrojan.Win32.Dapato.bsjzfg
ViRobotTrojan.Win32.Z.Blocker.8317440.AZR
MicroWorld-eScanGen:Variant.Symmi.34741
TencentTrojan.Win32.Blocker.zg
Ad-AwareGen:Variant.Symmi.34741
SophosMal/Generic-S
ComodoTrojWare.Win32.Injector.HO@82j6jo
BitDefenderThetaAI:Packer.DC953A6A21
TrendMicroRansom_Blocker.R002C0PK521
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
FireEyeGeneric.mg.483aea8feeb82d3b
EmsisoftGen:Variant.Symmi.34741 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Blocker.trx
AviraHEUR/AGEN.1114900
Antiy-AVLTrojan/Generic.ASMalwS.30F91B2
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.PSE.1D0PRQS
TACHYONRansom/W32.Blocker.8317440
AhnLab-V3Dropper/Win32.Dapato.R83155
McAfeeGenericRXIP-BJ!483AEA8FEEB8
MAXmalware (ai score=82)
VBA32TrojanRansom.Blocker
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_Blocker.R002C0PK521
RisingTrojan.Injector!1.DA56 (CLASSIC)
YandexTrojan.Injector!6XR9EGb/HqY
IkarusTrojan-Ransom.Blocker
FortinetW32/Injector.AHHO!tr
AVGWin32:MBRlock-DV [Trj]
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Blocker.qcio?

Trojan-Ransom.Win32.Blocker.qcio removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment