Wednesday, July 21, 2010

Trojan.Ransomware

This trojan is hidden behind an Adobe Flash Installer.



When executed, it is making a copy of itself in %DEFAULTUSERSPROFILE% and displays an invasive message box in Russian.



Phone number: 004287-924675 Code: 300p
To get rid of this Call/Code version, enter this serial code:
38724651

Run MBAM to remove the infection.