Trojan.Ransom (porno-rolik.avi.exe)

This trojan blocker ( MD5: f6b0d36f99a8d4c8e7bd0a82b2dbfa06 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.

Number to Call: 9651895206
Number to Call: 9651895292
Number to Call: 9651895745
Number to Call: 9032806541
Code to unlock Windows: CAPS

MBAM Engine have some difficulty for detect these samples (repacked every 1h on the server)

Pornoplayer variant.
Already noticed on the past: here (28 May 2k11) ~ here (4 Jun 2k11) ~ here (9 Jun 2k11) ~ here (11 Jun 2k11) ~ here (12 Jun 2k11) ~ here (12 Jun 2k11) ~ here (13 Jun 2k11) ~ here (20 Jun 2k11) ~ here (21 Jun 2k11) ~ here (21 Jun 2k11) ~ here (21 Jun 2k11) ~ here (22 Jun 2k11) ~ here (23 Jun 2k11)