KernelMode.info • Trojan:Win32/Ransom.BY

Page 1 of 2

Trojan:Win32/Ransom.BY

PostPosted:Mon Jan 17, 2011 12:32 am

by Xylitol

xxx.avi
https://www.virustotal.com/file-scan/re ... 1295209071
https://www.virustotal.com/file-scan/re ... 1295224064

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sun Jan 23, 2011 12:16 am

by Xylitol

https://www.virustotal.com/file-scan/re ... 1295729840

flash_player.exe: (unacked.exe)
https://www.virustotal.com/file-scan/re ... 1295700806
unlock: poputalda

xxx_video_53636.avi_Unpacked:
https://www.virustotal.com/file-scan/re ... 1295744505

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sun Jan 30, 2011 2:06 am

by Xylitol

http://www.virustotal.com/file-scan/rep ... 1296353162

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Mon Jan 31, 2011 11:08 am

by Xylitol

http://www.virustotal.com/file-scan/rep ... 1296472001

location: hxxp://ya-petrovsky2012.narod2.ru/xxx_video.avi.exe

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sun Feb 06, 2011 11:44 am

by Xylitol

new loc: hXXp://pepka-master2012.narod2.ru/xxx_video.avi.exe

Code: Select all

00406B81  |.  E8 62EAFFFF   CALL 004055E8           ; \GetWindowTextA

serial must start with "000" someone can confirm i dont really understand how work the regitration schem ?

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sat Feb 12, 2011 2:38 pm

by Xylitol

new loc: hXXp://tanechkaagafonova.narod2.ru/xxx_video.avi.exe

http://www.virustotal.com/file-scan/rep ... 1297521416
https://www.virustotal.com/file-scan/re ... 1297521496

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Thu Feb 17, 2011 1:47 pm

by Xylitol

locs: hXXp://video.barabas.cz.cc/video/xxx_video.avi

http://www.virustotal.com/file-scan/rep ... 1297950042
https://www.virustotal.com/file-scan/re ... 1297950143

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Thu Feb 17, 2011 10:58 pm

by Xylitol

loc: hXXp://video.bldupel.cz.cc/video/xxx_video.avi

http://www.virustotal.com/file-scan/rep ... 1297983390
https://www.virustotal.com/file-scan/re ... 1297983364

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sat Feb 19, 2011 8:49 am

by Xylitol

loc: hXXp://video.blaskel.cz.cc/video/xxx_video.avi

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sun Feb 20, 2011 11:48 am

by Xylitol

new loc: hXXp://video.bllesbo.cz.cc/video/xxx_video.avi