Saturday, 28 May 2011

Trojan.Ransom (porn2o-rolik2.avi.exe)

This trojan blocker ( MD5: aecf5532c99d4b5b51cd051513a8e505 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
According to VirusTotal the sample was detected by 9 Antivirus:
Unpacked was detected by 5 Antivirus and only NOD32 detect it as 'LockScreen':

Number to Call: 9670964964
Code to unlock Windows: WALKER

Pornoplayer variant.

No comments:

Post a Comment