Page 5 of 9
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Fri Apr 29, 2011 11:33 am
by shaheen
Thanks.
Was trying with windows built-in zip and ubuntu archive manager but no success.
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Sat Apr 30, 2011 3:35 pm
by Xylitol
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Tue May 17, 2011 11:02 pm
by Xylitol
Ransomware targeting american people.
VT: 7/43 >> 16.3%
https://www.virustotal.com/file-scan/re ... 1305548121
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Thu May 19, 2011 5:23 pm
by markusg
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Sun May 22, 2011 10:44 pm
by Xylitol
A relatively basic one.
![Image](../../img191.imageshack.us/img191/5714/sansreha.th.html)
Thread split
PostPosted:Tue Jul 05, 2011 1:59 am
by EP_X0FF
Thread split, Porno-Rolik discussion moved to
Trojan Winlock - WinAD topic. This was done because we strongly believe - they all related and produced by the same people.
EDIT:
Split again, new Lock'Em'All version moved to
Trojan Winlock - Lock'Em'All topic. Also built currently small table of active winlock locations.
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Thu Jul 07, 2011 7:45 pm
by Xylitol
Encoder Builder v2.31 xorist winlock generator with source code (Delphi/Asm)
Builder 30/43 >> 69.8%
http://www.virustotal.com/file-scan/rep ... 1310067752
'virgin' stub 18/43 >> 41.9%
http://www.virustotal.com/file-scan/rep ... 1310067296
Re: Trojan Winlock / Ransom / ScreenLocker
PostPosted:Wed Jul 13, 2011 4:34 am
by EP_X0FF
Some "articles" from script-kiddies.
hxxp://
www.zaton09.ru/2010-11-04-08-32-44/66--inprivate.html
hxxp://xaker.forumbb.ru/viewtopic.php?id=2714
hxxp://hacker-pro.net/showthread.php?t=19076
Re: Trojan.Winlock - WinAD
PostPosted:Wed Jul 20, 2011 12:12 pm
by mrbelyash
code?
pass-virus
Re: Trojan.Winlock - WinAD
PostPosted:Wed Jul 20, 2011 12:22 pm
by EP_X0FF
mrbelyash wrote:code?
pass-virus
Unblock code:
1G@h3J$k
Posts moved.
Unpacked in attach, see
Code: Select allCODE:00476F3C _TForm1_Button1Click