Sunday, 16 January 2011
This trojan blocker ( MD5: bbbecfd1ff100a2e70cd163b05de177d ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
Number to Call: 9099010810
Number to Call: 9099010759 (thanks to Gmax for this one)
Number to Call: 9629464469
Number to Call: 9629463283
Number to Call: 9629459917
Code to unlock Windows: DNKEYS
HomoBlocker is a variant of pornoplayer
HomoBlocker was already analyzed on the past: here (15 Jan 2k11)
Short website analyze ~
The "/kal/anetdqyocuevemc3.php" was a file from Phoenix Exploit Kit