Page 5 of 9

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Fri Apr 29, 2011 11:33 am
by shaheen
Thanks.

Was trying with windows built-in zip and ubuntu archive manager but no success.

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sat Apr 30, 2011 3:35 pm
by Xylitol

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Tue May 17, 2011 11:02 pm
by Xylitol
Ransomware targeting american people.

Image

VT: 7/43 >> 16.3%
https://www.virustotal.com/file-scan/re ... 1305548121

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Thu May 19, 2011 5:23 pm
by markusg

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Sun May 22, 2011 10:44 pm
by Xylitol
A relatively basic one.

Image

Thread split

PostPosted:Tue Jul 05, 2011 1:59 am
by EP_X0FF
Thread split, Porno-Rolik discussion moved to Trojan Winlock - WinAD topic. This was done because we strongly believe - they all related and produced by the same people.

EDIT:

Split again, new Lock'Em'All version moved to Trojan Winlock - Lock'Em'All topic. Also built currently small table of active winlock locations.

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Thu Jul 07, 2011 7:45 pm
by Xylitol
Encoder Builder v2.31 xorist winlock generator with source code (Delphi/Asm)

Image

Image

Builder 30/43 >> 69.8% http://www.virustotal.com/file-scan/rep ... 1310067752
'virgin' stub 18/43 >> 41.9% http://www.virustotal.com/file-scan/rep ... 1310067296

Re: Trojan Winlock / Ransom / ScreenLocker

PostPosted:Wed Jul 13, 2011 4:34 am
by EP_X0FF
Some "articles" from script-kiddies.

hxxp://www.zaton09.ru/2010-11-04-08-32-44/66--inprivate.html
hxxp://xaker.forumbb.ru/viewtopic.php?id=2714
hxxp://hacker-pro.net/showthread.php?t=19076

Re: Trojan.Winlock - WinAD

PostPosted:Wed Jul 20, 2011 12:12 pm
by mrbelyash
code?

Image

pass-virus

Re: Trojan.Winlock - WinAD

PostPosted:Wed Jul 20, 2011 12:22 pm
by EP_X0FF
mrbelyash wrote:code?

pass-virus
Unblock code: 1G@h3J$k

Posts moved.

Unpacked in attach, see
Code: Select all
CODE:00476F3C _TForm1_Button1Click