Sunday, 16 January 2011

Trojan.Ransom (Lock Em All)



This trojan blocker ( MD5: 80703b0e64fe28a82c86171d7f5b9fd3 ~ e9087eb2cd88e946389898cb3d496507 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 8-965-377-73-10 ~ 89653777310
Number to Call: 8-965-377-71-60 ~ 89653777160
Number to Call: 8-965-377-68-65 ~ 89653776865
Number to Call: 8-964-539-49-65 ~ 89645394965
Number to Call: 8-964-539-49-71 ~ 89645394971
Number to Call: 8-964-539-49-93 ~ 89645394993
Number to Call: 8-964-539-35-10 ~ 89645393510
Number to Call: 8-964-539-35-18 ~ 89645393518
Number to Call: 8-964-539-36-09 ~ 89645393609
Number to Call: 8-964-539-42-00 ~ 89645394200
Number to Call: 8-964-539-43-11 ~ 89645394311
Number to Call: 8-964-537-59-60 ~ 89645375960
Number to Call: 8-964-539-14-87 ~ 89645391487
Number to Call: 8-964-539-16-60 ~ 89645391660
Number to Call: 8-965-376-16-41 ~ 89653761641
Number to Call: 8-965-376-13-16 ~ 89653761316
Number to Call: 8-965-376-10-17 ~ 89653761017
Number to Call: 8-965-376-09-85 ~ 89653760985
Number to Call: 8-965-376-08-42 ~ 89653760842
Code to unlock Windows: 00059070


Thanks to EP_X0FF for the huge code listing.
xxx_video.exe (Lock Em All) was also noticed here (10 Nov 2k10) ~ here (1 Dec 2k10) ~ here (5 Dec 2k10) ~ here (5 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (24 Dec 2k10) ~ here (7 Jan 2k11) ~ here (7 Jan 2k11) ~ here (8 Jan 2k11) ~ here (12 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (16 Jan 2k11) ~ here (16 Jan 2k11) ~ here (16 Jan 2k11)

No comments:

Post a Comment