Trojan.Ransom (xxxvideo_best_porno.avi.exe)

This trojan blocker ( MD5: 2f0f9440dfaf1eaf637360a185e0ebcf ) prevents all software execution.

To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

According to VirusTotal, the sample is full undetected  ~ https://www.virustotal.com/file-scan/report.html?id=edac96fe8649f3a3213418ec47c7673aba3a89d5e06b38e7c74836c5e6f5c09c-1300671945

Number to Call: 8-918-515-65-49 ~ 89185156549

Code to unlock Windows: 9300

This ransomware come from fake porn site who look like:

This ransomware was also noticed here (18 Aug 2k10) ~ here (17 Dec 2k10) ~ here (27 Dec 2k10) ~ here (12 Jan 2k11) ~ here (14 Jan 2k11) ~ here (21 Jan 2k11) ~ here (23 Jan 2k11) ~ here (1 Feb 2k11) ~ here (3 Feb 2k11) ~ here (4 Feb 2k11) ~ here (4 Feb 2k11) ~ here (5 Feb 2k11) ~ here (7 Feb 2k11) ~ here (10 Feb 2k11) ~ here (12 Feb 2k11) ~ here (27 Feb 2k11) ~ here (10 Mar 2k11) ~ here (14 Mar 2k11) ~ here (14 Mar 2k11)

If you have a trouble for typing the serial please follow this