Categories: RansomTrojan

TrojanRansom.Blocker malicious file

The TrojanRansom.Blocker is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanRansom.Blocker virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanRansom.Blocker?


File Info:

crc32: 8F0DD40Fmd5: 319e34bf7ecf5c74e8c192be57093d96name: 319E34BF7ECF5C74E8C192BE57093D96.mlwsha1: 6d7050466d883a70896610fd377409bec21385a5sha256: 89ca0ea25e05983099ae8221becde0d57c5528d85d6ab8fd944f7c941437d679sha512: 84db04cd03c121245a1c59aea6722fa65cb2f9ff108c89ff72d9fed2de51b41e5919e9bbb51f57ccc7abbf914d18691c97eb95b5fd62c920069dba5437552573ssdeep: 12288:B0O9si66PFSav1nfcja/P4Tulz6dOG6767a9SwiscMnw:B0a+6UOfCa/A/6767aP2Vtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: 2013 xa9 Maxidix s.r.o.InternalName: DFM ConverterFileVersion: 13.1.3.78CompanyName: Maxidix s.r.o.LegalTrademarks: 2013 xa9 Maxidix s.r.o.Comments: ProductName: Delphi DFM ConverterProductVersion: 13FileDescription: Delphi DFM ConverterOriginalFilename: DFMConverter.exeTranslation: 0x0409 0x04e4

TrojanRansom.Blocker also known as:

Bkav W32.AIDetectVM.malware2
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.35828810
FireEye Generic.mg.319e34bf7ecf5c74
CAT-QuickHeal TrojanRansom.Blocker
McAfee Fareit-FZO!319E34BF7ECF
Cylance Unsafe
AegisLab Trojan.Win32.Blocker.j!c
K7AntiVirus Trojan ( 005752331 )
BitDefender Trojan.GenericKD.35828810
K7GW Trojan ( 005752331 )
Cybereason malicious.66d883
Cyren W32/Trojan.ETQS-0155
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win32:Malware-gen
ClamAV Win.Trojan.Generic-9816732-0
Kaspersky HEUR:Trojan-Ransom.Win32.Blocker.gen
Alibaba Ransom:Win32/Blocker.2f2a55fe
Rising Trojan.Injector!1.D0A2 (CLASSIC)
Ad-Aware Trojan.GenericKD.35828810
Sophos Mal/Generic-S
Comodo Malware@#3vhx1yl41538z
F-Secure Trojan.TR/AD.DbatLdr.neyzf
DrWeb Trojan.PWS.Siggen2.60925
McAfee-GW-Edition Fareit-FZO!319E34BF7ECF
Emsisoft Trojan.Injector (A)
SentinelOne Static AI – Suspicious PE
Avira TR/AD.DbatLdr.neyzf
Microsoft PWS:Win32/Fareit.SM!MTB
Gridinsoft Trojan.Win32.Downloader.oa!s1
Arcabit Trojan.Generic.D222B44A
ZoneAlarm HEUR:Trojan-Ransom.Win32.Blocker.gen
GData Trojan.GenericKD.35828810
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.Injector.R360174
BitDefenderTheta Gen:NN.ZelphiF.34700.MG2@aK04wAmk
ALYac Trojan.GenericKD.35828810
MAX malware (ai score=88)
Malwarebytes Trojan.MalPack.SMY
Panda Trj/GdSda.A
ESET-NOD32 a variant of Win32/Injector.EODV
TrendMicro-HouseCall TROJ_GEN.R002H06LN20
Ikarus Trojan.Inject
Fortinet W32/Injector.EOCJ!tr
AVG Win32:Malware-gen
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Generic/Trojan.b51

How to remove TrojanRansom.Blocker?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Generic.Dacic.8952383F.A.D60A38DD removal guide

The Generic.Dacic.8952383F.A.D60A38DD is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

How to remove “Malware.AI.4228548324”?

The Malware.AI.4228548324 is considered dangerous by lots of security experts. When this infection is active,…

31 mins ago

What is “Malware.AI.4218977589”?

The Malware.AI.4218977589 is considered dangerous by lots of security experts. When this infection is active,…

47 mins ago

Trojan:Win32/FormBook.SD!MTB removal guide

The Trojan:Win32/FormBook.SD!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Trojan:Win32/Zbot.FFH!MTB”?

The Trojan:Win32/Zbot.FFH!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Malware.AI.3743235152 removal

The Malware.AI.3743235152 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago