What is “Trojan.Win32.Blamon.ubt”?

The Trojan.Win32.Blamon.ubt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Blamon.ubt virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Blamon.ubt?


File Info:
crc32: 2B58563D
md5: 3940ca7766b87ea902706d65dde6ee59
name: 3940CA7766B87EA902706D65DDE6EE59.mlw
sha1: 227c1dd9ecbea6f1c14776d151121879b31199fa
sha256: 419970f296d8becd91a843806d5d7a50ef28277dc3f95631e824e4cc13252d8e
sha512: 447879c3f92a7413a90e306a51b49ed35abc85089a396341a5cb94172a66a8004dd7ca149f0ba6ab08bf26e7ddcb8b0104d89104e6f69b1c37d36f1443c90785
ssdeep: 768:PrsXgfwMqRFd/x4m8qvJbF70Ib0xQw6Ojtk0JGTJ+WKuvU2d556V:PrswIXRT/xCqvr70u0x96uGTJ+k/L
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Trojan.Win32.Blamon.ubt also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Adware ( 00506e8d1 )
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.Blamon.ubt
BitDefenderTheta	Gen:NN.ZedlaF.34722.cmOfaedR9En
FireEye	Generic.mg.3940ca7766b87ea9
SentinelOne	Static AI – Suspicious PE
Avira	TR/Spy.Gen
eGambit	Unsafe.AI_Score_86%
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Trojan/Win.Generic.C4507526
TrendMicro-HouseCall	TROJ_GEN.R005H07F321
Rising	Malware.Heuristic!ET#78% (RDMK:cmRtazovNQG+rcAj3mQ0foqH+T9Z)
Ikarus	AdWare.Win32.BlackMoon
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Blamon

How to remove Trojan.Win32.Blamon.ubt?

Trojan.Win32.Blamon.ubt removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X