Sunday 16 January 2011

Trojan.Ransom (Lock Em All)



This trojan blocker ( MD5: 3893305aad9d0ca5d9cf4c2595408f34 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 8-906-096-62-03 ~ 89060966203
Number to Call: 8-906-096-62-16 ~ 89060966216
Number to Call: 8-906-096-86-12 ~ 89060968612
Number to Call: 8-906-096-62-27 ~ 89060966227
Number to Call: 8-906-096-85-99 ~ 89060968599
Number to Call: 8-906-096-69-53 ~ 89060966953
Number to Call: 8-906-096-69-33 ~ 89060966933
Number to Call: 8-906-096-68-09 ~ 89060966809
Number to Call: 8-906-096-67-99 ~ 89060966799
Number to Call: 8-906-096-67-45 ~ 89060966745
Number to Call: 8-906-096-67-27 ~ 89060966727
Number to Call: 8-906-096-66-84 ~ 89060966684
Number to Call: 8-906-096-66-25 ~ 89060966625
Number to Call: 8-906-096-65-66 ~ 89060966566
Number to Call: 8-906-096-65-82 ~ 89060966582
Number to Call: 8-906-096-65-50 ~ 89060966550
Number to Call: 8-906-096-64-80 ~ 89060966480
Number to Call: 8-906-096-64-58 ~ 89060966458
Number to Call: 8-906-096-64-45 ~ 89060966445
Number to Call: 8-906-096-63-87 ~ 89060966387
Number to Call: 8-965-378-09-91 ~ 89653780991
Number to Call: 8-967-151-52-77 ~ 89671515277
Number to Call: 8-967-151-52-78 ~ 89671515278
Number to Call: 8-965-357-85-36 ~ 89653578536
Number to Call: 8-965-357-87-73 ~ 89653578773
Number to Call: 8-965-378-18-29 ~ 89653781829
Number to Call: 8-965-378-18-24 ~ 89653781824
Number to Call: 8-965-378-18-23 ~ 89653781823
Number to Call: 8-965-378-16-91 ~ 89653781691
Number to Call: 8-965-378-16-63 ~ 89653781663
Number to Call: 8-965-378-16-55 ~ 89653781655
Number to Call: 8-965-378-15-68 ~ 89653781568
Number to Call: 8-965-378-11-45 ~ 89653781145
Number to Call: 8-965-378-13-00 ~ 89653781300
Code to unlock Windows: 00059070


Thanks to EP_X0FF for the huge code listing.
xxx_video.exe (Lock Em All) was also noticed here (10 Nov 2k10) ~ here (1 Dec 2k10) ~ here (5 Dec 2k10) ~ here (5 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (24 Dec 2k10) ~ here (7 Jan 2k11) ~ here (7 Jan 2k11) ~ here (8 Jan 2k11) ~ here (12 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (16 Jan 2k11) ~ here (16 Jan 2k11)

1 comment: