Trojan.Ransom

Merci a S!Ri pour la sample.
This trojan blocker ( MD5: 16B654EF88024FF9A75D1E1A7DC2EB0F ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

 

Number to Call: 89104070725

Code to unlock Windows: 440039571

Run MBAM to remove the infection. 

Trojan.Ransom

 Merci a S!Ri pour la sample.
This trojan blocker ( MD5: 67eb19b03e7d9ac6d2fbe7b088916609 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

Number to Call: 905-708-36-20
Code to unlock Windows: 644332
Run MBAM to remove the infection.

Trojan.Ransomware

When executed, it is stealing password saved in browsers. It is also displaying an invasive message box in Russian.

To unlock Windows, enter this serial code: 38724651

Run MBAM to remove the infection.

Trojan.Ransomware

According to S!Ri
When executed, it is stealing password saved in browsers. It is also displaying an invasive message box in Russian.

Number to Call: 86573638
Text to send: 6005
To unlock Windows, enter this serial code: 29543874

Run MBAM to remove the infection.