Friday, 24 June 2011

Trojan.Ransom (porno-rolik.avi.exe)


This trojan blocker ( MD5: f6b0d36f99a8d4c8e7bd0a82b2dbfa06 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 9651895206
Number to Call: 9651895292
Number to Call: 9651895745
Number to Call: 9032806541
Code to unlock Windows: CAPS


MBAM Engine have some difficulty for detect these samples (repacked every 1h on the server)



Pornoplayer variant.
Already noticed on the past: here (28 May 2k11) ~ here (4 Jun 2k11) ~ here (9 Jun 2k11) ~ here (11 Jun 2k11) ~ here (12 Jun 2k11) ~ here (12 Jun 2k11) ~ here (13 Jun 2k11) ~ here (20 Jun 2k11) ~ here (21 Jun 2k11) ~ here (21 Jun 2k11) ~ here (21 Jun 2k11) ~ here (22 Jun 2k11) ~ here (23 Jun 2k11)

No comments:

Post a comment