December 1st, 2009, 06:49 PM #1
- Join Date
- Jan 2003
- Outside the box
- Blog Entries
New Ransomware Blocks Internet Access
A nasty piece of ransomware has been discovered that block a computers internet access and demands and activation code to return a users control.
The trojan, dubbed 'Win32/RansomSMS.AH', is bundled with software named uFast Download Manager. Once downloaded the software was installed in the background without informing users. The trojan then hijacks your pc settings and begins blocking internet access demanding an activation code. This activation code is obtained by sending an SMS containing a particular number to an expensive premium rate phone number.
CA ISBU created an activation code generator that works to circumvent the activation scheme for this particular ransomware. As of yet there was no word on actual removal tools.
Source: CA Security Advisor Research Blog
Via my blog
December 5th, 2009, 11:17 AM #2
Nasty stuff. Not sure I'd use removal tools on something like that.
It would be a straight format and low-level wipe of the drive and hope the people had a good, recent backup.
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
By techy1980 in forum General Tech DiscussionReplies: 2Last Post: November 10th, 2009, 06:47 AM
By cksboy15 in forum Networking and InternetReplies: 1Last Post: January 12th, 2009, 12:42 AM
By chipbgt in forum DebateIMO: Politics, Religion, ControversyReplies: 2Last Post: February 26th, 2008, 01:33 AM
By JustHelpMe in forum Networking and InternetReplies: 2Last Post: May 4th, 2005, 07:49 AM
By JayMan in forum Applications and Operating SystemsReplies: 10Last Post: December 16th, 2002, 05:51 AM