Monday, 18 April 2011

Trojan.Ransom (Winlocker builder)

This trojan blocker ( MD5: fcd93434cae65b3936e4d25620a8cc1b ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

Number to Call: 0743782
Code to unlock windows: A&CHx+razB)R+

This winlock was generated by Winlocker builder
Congratz to the author, crypter was really boring.
Thanks to mrbelyash for the sample.

No comments:

Post a Comment