Trojan-Ransom.Win32.Blocker.tepg malicious file

The Trojan-Ransom.Win32.Blocker.tepg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.tepg virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Created a process from a suspicious location
• Installs itself for autorun at Windows startup
• Harvests cookies for information gathering
• Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Blocker.tepg?

File Info:
name: 5464E438D013C69CF624.mlw
path: /opt/CAPEv2/storage/binaries/55300793a80c16990378c183efb9fc9d8ace19a86472c994f1984557739bfe99
crc32: E34F2F51
md5: 5464e438d013c69cf6244ece2871c192
sha1: 8df23ae3dd295f042c089d6591bd4841f34688fc
sha256: 55300793a80c16990378c183efb9fc9d8ace19a86472c994f1984557739bfe99
sha512: 58b999e66aa3a14d05251d511c8e8d77b46b078f65a09b94ba482d8d1a6608c35d16c7003e2146765761d51bb020227bf11020114e5f6c4be26ba8f09173fd88
ssdeep: 196608:0Kazg7DS8KazhKazg7DS8Kazg7DS8KazhKazg7DS8KazhKazg7DS8Kazg7DS8KaI:Ig7uARg7uAg7uARg7uARg7uAg7uA8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T196F6023AF5D08437D1236E7CCC5BA794A8357EE02D28608A7BE81D4D9F39B8135262D7
sha3_384: 983b9d361a324ec4efe254d9ceb937057503de4ca1c041147a015436fe970c86a68abb36b9df2b31c5c692118ba7e445
ep_bytes: 55545d906a2890596a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Blocker.tepg also known as:

How to remove Trojan-Ransom.Win32.Blocker.tepg?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.