Ransom • Trojan

Trojan-Ransom.Win32.Blocker.zhjc removal tips

The Trojan-Ransom.Win32.Blocker.zhjc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Blocker.zhjc virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan-Ransom.Win32.Blocker.zhjc?


File Info:
name: FACFE66852B85FC0FDB7.mlw
path: /opt/CAPEv2/storage/binaries/5392096f047c12d13c7f65b173a3d941d5161ae0bb5d36e5c5ac7bb95d4c6f7e
crc32: 5AA239FE
md5: facfe66852b85fc0fdb7a1ee5cfa6b9b
sha1: e4207adba17cc6ae248293f8f8be3c5409602c5c
sha256: 5392096f047c12d13c7f65b173a3d941d5161ae0bb5d36e5c5ac7bb95d4c6f7e
sha512: 73fd4475162b6e103276cb3c6fc4dbc534d46cfcda53232ac25a246f67fdcfe587791bfc75f1da283138fdffd1d6ee4f8110abab70cf08b7ff8745b1f0e5bc22
ssdeep: 768:SEHNUk59kkkkEvkkIhswkkkkkkkkkkkkkskR7M41v1TbpC/fgm3Htx:SEHNdkkkkOkkIhswkkkkkkkkkkkkksMo
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T149B22B69699CC62ED66F4BBC7CB316240371E3825919EB866CCC9DBF196335048313E7
sha3_384: 6bcdfdef748c17430735001169be1dc4c305237c89d82af4a3253bea17a6c6c12e7b5deca3c82dea1a7df1c1c5c7a197
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-03-04 02:33:32

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: braabra.exe
LegalCopyright:  
OriginalFilename: braabra.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan-Ransom.Win32.Blocker.zhjc also known as:

Lionic	Trojan.Win32.Convagent.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.65778980
FireEye	Trojan.GenericKD.65778980
Sangfor	Trojan.Win32.Agent.Vg0o
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.zhjc
BitDefender	Trojan.GenericKD.65778980
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.65778980 (B)
McAfee-GW-Edition	Artemis
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Arcabit	Trojan.Generic.D3EBB524
ZoneAlarm	Trojan-Ransom.Win32.Blocker.zhjc
GData	Win32.Trojan-Downloader.Generic.OMVLZD
McAfee	Artemis!FACFE66852B8
MAX	malware (ai score=81)
Rising	Downloader.Convagent!8.123D1 (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen

How to remove Trojan-Ransom.Win32.Blocker.zhjc?

Trojan-Ransom.Win32.Blocker.zhjc removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X