Thursday, 10 March 2011

Trojan.Ransom (porno_video1019.avi.exe)


This trojan blocker ( MD5: b16c8b211a9cff55bb316e140ed43a08 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
According to VirusTotal, the sample is detected by just one Antivirus as 'Suspicious file'  ~ https://www.virustotal.com/file-scan/report.html?id=2f6cc864e36274e67c61c057b9844468c9862918e52a6accbfef1cd035b0073e-1299722254


Number to Call: 9636254756
Number to Call: 9646284189
Number to Call: 9645730849
Number to Call: 9057922996
Number to Call: 9652637446
Code to unlock Windows: 852852


This ransomware come from fake pron site who look like:


This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (12 Feb 2k11) ~ here (27 Feb 2k11)

If you have a trouble for typing the serial please follow this

No comments:

Post a comment