This trojan blocker ( MD5: 5b588371758a9cc250264bac9126bee3 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.
According to VirusTotal, the sample is full undetected ~ https://www.virustotal.com/file-scan/report.html?id=e38c7f313456e5ebbb4373a693b60327684a7268927d574590451d23a23ad7ca-1300080800
Number to Call: 9602454992
Number to Call: 9602454750
Number to Call: 9062477109
Number to Call: 9643656079
Number to Call: 9626908476
Number to Call: 9643681109
Number to Call: 9602696525
Number to Call: 9035484910
Number to Call: 9651752654
Code to unlock Windows: 963852
This ransomware come from fake porn site who look like:
This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (12 Feb 2k11) ~ here (27 Feb 2k11) ~ here (10 Mar 2k11) ~ here (14 Mar 2k11)
If you have a trouble for typing the serial please follow this
No comments:
Post a Comment