Monday 10 October 2011

Trojan.Ransom



This trojan blocker ( MD5: e742ee3e51d9b9dfb66d438e386a2193 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


WebMoney: U157727070520
Code to unlock windows: 9876543214563691921

3 comments:

  1. Hey, bro, what debugger do yo use? :)

    ReplyDelete
  2. @Anonymous, I use Ollydbg.

    @sad, strcmp you mean ?
    nope, i've just make a breakpoint on the messagebox and then just following the code who call it until i found where it check the serial.

    ReplyDelete