Thursday 13 January 2011

Trojan.Ransom (pornoplayer.exe)



This trojan blocker ( MD5: 9035d781db7208399454091032dfeda3 ) prevents all software execution.
To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.


Number to Call: 9030085889
Code to unlock Windows: DOUBLE DRAGON

Note for reverse engineers:



pornoplayer.exe was also noticed  here (29 Nov 2k10) ~ here (5 Dec 2k10) ~ here (14 Dec 2k10) ~ here (17 Dec 2k10) ~ here (23 Dec 2k10) ~ here (23 Dec 2k10) ~ here (24 Dec 2k10) ~ here (27 Dec 2k10) ~ here (29 Dec 2k10) ~ here (10 Jan 2k11)

No comments:

Post a Comment