Trojan.Ransom (pornoplayer.exe)

This trojan blocker ( MD5: 5572086328fdc8e33954b7c605ec5672 ) prevents all software execution.

To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

Detection rate for this new 'update': 7/43 according to VirusTotal: https://www.virustotal.com/file-scan/report.html?id=33e4e62abf0eaa2c0554214708b1395811f42423bcfa47bfe1fe69777ec90a54-1299284630

Number to Call: 9652482698

Number to Call: 9653374388

Number to Call: 9653372832
Number to Call: 9670988650
Number to Call: 9653374629
Number to Call: 9670988246

Number to Call: 9652481712

Code to unlock Windows: ZERATUL

Reference to the video game "StarCraft"

code who make no sens as usual:

pornoplayer.exe was also noticed on the past: here (29 Nov 2k10) ~ here (5 Dec 2k10) ~ here (14 Dec 2k10) ~ here (17 Dec 2k10) ~ here (23 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (27 Dec 2k10) ~ here (29 Dec 2k10) ~ here (10 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (19 Jan 2k11) ~ here (20 Jan 2k11) ~ here (25 Jan 2k11) ~ here (30 Jan 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (17 Feb 2k11) ~ here (22 Feb 2k11) ~ here (2 Mar 2k11)