Trojan-Ransom.Win32.Blocker

Detect Date 09/29/2015
Class Trojan-Ransom
Platform Win32
Description

After Trojan-Ransom.Win32.Blocker is installed on a computer, this Trojan adds itself to the computer’s startup routine and blocks the operating system from loading normally. When the operating system is started, Trojan-Ransom.Win32.Blocker takes control of the computer and displays a window asking the user to send an SMS message with special text to the indicated short number. In return, the window states, the user will receive a code for deactivating the malware and unlocking access to the computer.

Geographical distribution of attacks by the Trojan-Ransom.Win32.Blocker family

blockerimgeng

Geographical distribution of attacks during the period from 27 September 2014 to 27 September 2015

Top 10 countries with most attacked users (% of total attacks)

Country % of users attacked worldwide*
1 India 28.71
2 Russia 9.62
3 Brazil 5.62
4 Germany 5.14
5 Algeria 4.31
6 Vietnam 4.02
7 Iran 2.71
8 USA 2.28
9 Ukraine 2.18
10 Egypt 1.95

* Percentage among all unique Kaspersky users worldwide who were attacked by this malware