Wednesday 19 January 2011

Trojan.Ransom (Lock Em All)



This trojan blocker ( MD5: 8e7f30acccd0a37174e1108bfb67b3bc ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 8-965-291-06-62 ~ 89652910662
Number to Call: 8-968-823-59-09 ~ 89688235909
Number to Call: 8-968-823-57-07 ~ 89688235707
Number to Call: 8-964-576-98-30 ~ 89645769830
Number to Call: 8-965-328-18-22 ~ 89653281822
Number to Call: 8-965-328-17-68 ~ 89653281768
Number to Call: 8-909-622-14-40 ~ 89096221440
Number to Call: 8-909-621-93-19 ~ 89096219319
Number to Call: 8-909-621-93-70 ~ 89096219370
Number to Call: 8-909-621-94-06 ~ 89096219406
Number to Call: 8-909-621-94-18 ~ 89096219418
Number to Call: 8-909-621-97-30 ~ 89096219730
Number to Call: 8-909-621-97-43 ~ 89096219743
Number to Call: 8-909-622-15-30 ~ 89096221530
Number to Call: 8-909-622-14-82 ~ 89096221482
Number to Call: 8-909-621-94-38 ~ 89096219438
Number to Call: 8-909-621-95-04 ~ 89096219504
Number to Call: 8-909-621-95-21 ~ 89096219521
Number to Call: 8-909-621-95-25 ~ 89096219525
Number to Call: 8-909-622-14-74 ~ 89096221474
Number to Call: 8-965-378-38-39 ~ 89653783839
Number to Call: 8-963-662-92-90 ~ 89636629290
Number to Call: 8-963-662-91-01 ~ 89636629101
Number to Call: 8-963-662-88-97 ~ 89636628897
Number to Call: 8-963-661-71-58 ~ 89636617158
Number to Call: 8-963-662-88-96 ~ 89636628896
Number to Call: 8-963-661-70-98 ~ 89636617098
Number to Call: 8-965-378-40-08 ~ 89653784008
Number to Call: 8-963-663-14-83 ~ 89636631483
Code to unlock Windows: 3796054


Thanks to EP_X0FF for the huge code list
xxx_video.exe (Lock Em All) was also noticed here (10 Nov 2k10) ~ here (1 Dec 2k10) ~ here (5 Dec 2k10) ~ here (5 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (24 Dec 2k10) ~ here (7 Jan 2k11) ~ here (7 Jan 2k11) ~ here (8 Jan 2k11) ~ here (12 Jan 2k11) ~ here (13 Jan 2k11) ~ here (14 Jan 2k11) ~ here (15 Jan 2k11) ~ here (16 Jan 2k11) ~ here (16 Jan 2k11) ~ here (16 Jan 2k11) ~ here (17 Jan 2k11) ~ here (18 Jan 2k11) ~ here (18 Jan 2k11) ~ here (19 Jan 2k11)

1 comment: