Categories: RansomTrojan

Should I remove “Trojan-Ransom.Win32.Blocker.rpdf”?

The Trojan-Ransom.Win32.Blocker.rpdf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Blocker.rpdf virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.rpdf?


File Info:

crc32: EA27090Fmd5: cdb8ed36ebc0eb2eab813cf4c3dd95c5name: CDB8ED36EBC0EB2EAB813CF4C3DD95C5.mlwsha1: 316c85f1bfec83907388307f315d0edfe796ac06sha256: 6b7bfe2e55d7247c0121be4af8631b5945a1a02ccad5ca8d936cdfa13302dd22sha512: 41179530ef5ac79625676a5eb067ad2254dc8d6e40269046188e61fba520b6dd4304aaf13c0888aee416dd667b9d36b14d1a33be54262c1cc55fce1c80a14246ssdeep: 196608:0Zazg7DS8Zazg7DS8Zazg7DS8Zazg7DS8Zazg7DSv:Bg7uJg7uJg7uJg7uJg7uvtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Blocker.rpdf also known as:

K7AntiVirus Trojan ( 00548e051 )
Elastic malicious (high confidence)
DrWeb Trojan.DownLoader6.7779
ClamAV Win.Trojan.Mbrlock-9779766-0
CAT-QuickHeal Trojan.WacatacPMF.S16539689
ALYac Gen:Variant.Symmi.34741
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
Alibaba Trojan:Win32/Starter.ali1001008
K7GW Trojan ( 00548e051 )
Cybereason malicious.6ebc0e
Cyren W32/Injector.OZVT-2500
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Injector.AHHO
APEX Malicious
Avast Win32:MBRlock-DV [Trj]
Cynet Malicious (score: 100)
Kaspersky Trojan-Ransom.Win32.Blocker.rpdf
BitDefender Gen:Variant.Symmi.34741
NANO-Antivirus Trojan.Win32.Dapato.bsjzfg
MicroWorld-eScan Gen:Variant.Symmi.34741
Tencent Trojan.Win32.Blocker.zg
Ad-Aware Gen:Variant.Symmi.34741
Sophos ML/PE-A + Troj/Agent-BFYB
Comodo TrojWare.Win32.Injector.HO@82j6jo
BitDefenderTheta AI:Packer.9896AD8521
TrendMicro TROJ_GEN.R03BC0PKB21
McAfee-GW-Edition BehavesLike.Win32.Generic.tc
FireEye Generic.mg.cdb8ed36ebc0eb2e
Emsisoft Gen:Variant.Symmi.34741 (B)
SentinelOne Static AI – Malicious PE
Jiangmin Trojan.Blocker.pkq
Avira DR/Delphi.Gen
eGambit Unsafe.AI_Score_97%
Antiy-AVL Trojan/Generic.ASMalwS.30ED84C
Microsoft Trojan:Win32/Injector.INK!MTB
GData Win32.Trojan.PSE.1UHCZJG
TACHYON Backdoor/W32.Androm.10396160
AhnLab-V3 Dropper/Win32.Dapato.R83155
Acronis suspicious
McAfee GenericRXIP-BJ!CDB8ED36EBC0
MAX malware (ai score=86)
VBA32 Trojan.Downloader
Malwarebytes Trojan.Crypt
Panda Trj/Genetic.gen
TrendMicro-HouseCall TROJ_GEN.R03BC0PKB21
Rising Trojan.Injector!1.DA56 (CLASSIC)
Yandex Trojan.Injector!nfedw5apY3U
Ikarus Trojan-Ransom.Blocker
MaxSecure Trojan.Malware.127304917.susgen
Fortinet W32/Injector.AHHO!tr
AVG Win32:MBRlock-DV [Trj]
Paloalto generic.ml

How to remove Trojan-Ransom.Win32.Blocker.rpdf?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Should I remove “Malware.AI.3914590665”?

The Malware.AI.3914590665 is considered dangerous by lots of security experts. When this infection is active,…

36 mins ago

Trojan:Win32/Startpage.YT removal instruction

The Trojan:Win32/Startpage.YT is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago

Win32/Injector.Autoit.FXP removal guide

The Win32/Injector.Autoit.FXP is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Should I remove “Trojan.Agent.Delf.RVB”?

The Trojan.Agent.Delf.RVB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

IL:Trojan.MSILZilla.124965 malicious file

The IL:Trojan.MSILZilla.124965 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Trojan.Generic.35601204 removal

The Trojan.Generic.35601204 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago