Trojan.Ransom (porno_video1019.avi.exe)

This trojan blocker ( MD5: b16c8b211a9cff55bb316e140ed43a08 ) prevents all software execution.

To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

According to VirusTotal, the sample is detected by just one Antivirus as 'Suspicious file'  ~ https://www.virustotal.com/file-scan/report.html?id=2f6cc864e36274e67c61c057b9844468c9862918e52a6accbfef1cd035b0073e-1299722254

Number to Call: 9636254756

Number to Call: 9646284189

Number to Call: 9645730849

Number to Call: 9057922996

Number to Call: 9652637446

Code to unlock Windows: 852852

This ransomware come from fake pron site who look like:

This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (12 Feb 2k11) ~ here (27 Feb 2k11)

If you have a trouble for typing the serial please follow this