Wednesday, 2 March 2011

Trojan.Ransom (pornoplayer.exe)



This trojan blocker ( MD5: dfa1a177f5eeacbeab0d9f8d03cd0184 ) prevents all software execution.

To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 9652077094
Number to Call: 9057065585
Number to Call: 9652076283
Number to Call: 9670998902
Number to Call: 9653772678
Code to unlock Windows: KERRIGAN IS NOT SEXY
Reference to the video game "StarCraft"




pornoplayer.exe was also noticed on the past: here (29 Nov 2k10) ~ here (5 Dec 2k10) ~ here (14 Dec 2k10) ~ here (17 Dec 2k10) ~ here (23 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (27 Dec 2k10) ~ here (29 Dec 2k10) ~ here (10 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (19 Jan 2k11) ~ here (20 Jan 2k11) ~ here (25 Jan 2k11) ~ here (30 Jan 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (17 Feb 2k11) ~ here (22 Feb 2k11)

No comments:

Post a Comment