Thanks to Lawrence for the sample.
This trojan blocker (SHA1: 567953b3562465587d3b1c8360868d0a6bacde73 and 3f7c516fc06f84b806e2ab677442fc1e3d927364 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
Ref: 0012140809940
Phone: +16464816878
Mail: security116@gmail.com
Unlock code: 76557152140071780302280
2nd version:
Ref: 0012140809940
Phone: +16464816878
Mail: security116@gmail.com
Unlock code: aes987156
