Sunday, 16 January 2011

Trojan.Ransom (Lock Em All)



This trojan blocker ( MD5: 1a24c2e4ce80a1e36da1b272c24ebb91 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 8-909-650-39-36 ~ 89096503936
Number to Call: 8-909-650-39-37 ~ 89096503937
Number to Call: 8-909-650-42-51 ~ 89096504251
Number to Call: 8-909-650-42-40 ~ 89096504240
Number to Call: 8-909-650-42-14 ~ 89096504214
Number to Call: 8-909-650-42-11 ~ 89096504211
Number to Call: 8-909-650-42-02 ~ 89096504202
Number to Call: 8-909-650-41-87 ~ 89096504187
Number to Call: 8-909-650-41-68 ~ 89096504168
Number to Call: 8-909-650-41-64 ~ 89096504164
Number to Call: 8-909-650-41-57 ~ 89096504157
Number to Call: 8-909-650-41-49 ~ 89096504149
Number to Call: 8-909-650-44-70 ~ 89096504470
Number to Call: 8-909-650-44-60 ~ 89096504460
Number to Call: 8-906-097-14-42 ~ 89060971442
Number to Call: 8-906-097-14-25 ~ 89060971425
Number to Call: 8-906-097-14-09 ~ 89060971409
Number to Call: 8-906-097-13-94 ~ 89060971394
Number to Call: 8-906-097-13-93 ~ 89060971393
Number to Call: 8-906-097-13-91 ~ 89060971391
Number to Call: 8-903-202-97-53 ~ 89032029753
Number to Call: 8-903-203-11-79 ~ 89032031179
Number to Call: 8-965-410-17-38 ~ 89654101738
Number to Call: 8-965-340-45-32 ~ 89653404532
Number to Call: 8-965-265-90-20 ~ 89652659020
Code to unlock Windows: 99105784


Thanks to EP_X0FF for the huge code listing.
xxx_video.exe (Lock Em All) was also noticed here (10 Nov 2k10) ~ here (1 Dec 2k10) ~ here (5 Dec 2k10) ~ here (5 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (24 Dec 2k10) ~ here (7 Jan 2k11) ~ here (7 Jan 2k11) ~ here (8 Jan 2k11) ~ here (12 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (16 Jan 2k11)

No comments:

Post a comment