Ransom • Trojan

Trojan-Ransom.Win32.PornoBlocker.eixs removal tips

The Trojan-Ransom.Win32.PornoBlocker.eixs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.PornoBlocker.eixs virus can do?

Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.PornoBlocker.eixs?


File Info:
crc32: 8AF253DB
md5: fba495d62d32b722df99f44ce0728480
name: FBA495D62D32B722DF99F44CE0728480.mlw
sha1: f90e02ca45638f5b2602ea8b92684eccc51a8387
sha256: 88f5bc9542630f9e2254a86d290e7b919b9cff1a8384a258f36f8e53086414ce
sha512: 2398163f22efa3e69c9d1ac941c003187f4d68d74a8354882f92e44c987090282d728f5d0f065c07902c93271afaaedda632cdf57261dc0ea21d8a72eb889544
ssdeep: 768:WZpKwcvsijOqvi2rtwuP+y31uesvikB3q:WZpKwcvsiUKtwuxdWiktq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WAB.EXE
FileVersion: 6.00.2900.6040 (xpsp_sp3_qfe.101011-1837)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.6040
FileDescription: Address Book
OriginalFilename: WAB.EXE
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.PornoBlocker.eixs also known as:

Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Virut.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMetagen [Malware]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.PornoBlocker.eixs
NANO-Antivirus	Trojan.Win32.PornoBlocker.fekici
Tencent	Malware.Win32.Gencirc.10b0d12b
Comodo	Malware@#243j6hjhlq1cu
McAfee-GW-Edition	BehavesLike.Win32.Virut.lz
FireEye	Generic.mg.fba495d62d32b722
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Gen
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Occamy.C
AegisLab	Trojan.Win32.PornoBlocker.j!c
TACHYON	Trojan/W32.PornoBlocker.73216.D
McAfee	Artemis!FBA495D62D32
MAX	malware (ai score=97)
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/CI.A
Rising	Virus.Virut!8.44 (CLOUD)
Ikarus	Trojan.Symmi
Fortinet	W32/PornoBlocker.EIXS!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.PornoBlocker.HwgAEpsA

How to remove Trojan-Ransom.Win32.PornoBlocker.eixs?

Trojan-Ransom.Win32.PornoBlocker.eixs removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X