12.13.12

Ransomware

Ransomware Trojan horse is hitting over again, prevents you from accessing your computer. The latest one discovered lately covers the entire desktop with a message that appears to be from the local authorities, which asks for a fine payment in order to unlock your system. This threat identifies your country by your IP and display relevant image in your language and the relevant authority logo.

Other than the ransom demand, the Trojan horse drops a copy of itself in several application data folders and sets several registry auto-run keys in order to stay up and running even when the system reboots. The Trojan disables the task manager and closes all open windows.