Sunday, 27 February 2011

Trojan.Ransom (flash_player.exe)



This trojan blocker ( MD5: 0e22e76e8bc989c2073cbf18a408a582 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
According to VirusTotal, the sample is detected by 5 Antivirus ~ https://www.virustotal.com/file-scan/report.html?id=d9defe14617c6252d8f87590bcadf39d935a548cd981da45a253e9a49e864711-1298817077


Number to Call: 8-965-240-49-18 ~ 89652404918
Number to Call: 8-967-027-18-99 ~ 89670271899
Number to Call: 8-967-171-23-65 ~ 89671712365
Number to Call: 8-905-545-97-92 ~ 89055459792
Number to Call: 8-967-150-24-66 ~ 89671502466
Code to unlock Windows: karabas


This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (12 Feb 2k11)

If you have a trouble for typing the serial please follow this



No comments:

Post a comment