Monday, 10 October 2011

Trojan.Ransom



This trojan blocker ( MD5: e742ee3e51d9b9dfb66d438e386a2193 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


WebMoney: U157727070520
Code to unlock windows: 9876543214563691921

Posted by at 20:32
Labels: ,

3 comments:

  1. Anonymous10 October 2011 at 21:49

    Hey, bro, what debugger do yo use? :)

    ReplyDelete
  2. sad10 October 2011 at 22:11

    Found via strngcmp or ?

    ReplyDelete
  3. Steven K10 October 2011 at 22:41

    @Anonymous, I use Ollydbg.

    @sad, strcmp you mean ?
    nope, i've just make a breakpoint on the messagebox and then just following the code who call it until i found where it check the serial.

    ReplyDelete

Subscribe to: Post Comments (Atom)