Thursday, 10 February 2011

Trojan.Ransom (flash_player.exe)



This trojan blocker ( MD5: 39c3906103151e1e76cad0c04ef46fd4 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
According to VirusTotal, the sample is detected by just one Antivirus ~ https://www.virustotal.com/file-scan/report.html?id=deb831fb7c03742afed75662088741ad3dcb88cfedcb90211c6cec61a570b7e4-1297308458


Number to Call: 8-965-122-98-04 ~ 89651229804
Number to Call: 8-965-399-60-27 ~ 89653996027
Number to Call: 8-903-137-34-87 ~ 89031373487
Number to Call: 8-965-315-84-92 ~ 89653158492
Number to Call: 8-967-214-38-77 ~ 89672143877
Number to Call: 8-965-304-54-41 ~ 89653045441
Number to Call: 8-909-677-41-98 ~ 89096774198
Number to Call: 8-965-339-50-16 ~ 89653395016
Number to Call: 8-963-756-50-86 ~ 89637565086
Number to Call: 8-963-671-47-85 ~ 89636714785
Code to unlock Windows: put


This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11)

If you have a trouble for typing the serial please follow this

1 comment: