- Jan 7, 2011
- 1,362
The malware disguises as a video player on pornographic sites and target Russian users. Once installed it disables system features and displays a huge banner on the screen The banner contains a warning that the user has visited sites containing child pornography. If the user wants to remove the warning banner, he should pay about $15.
Paying the creators of ransomware is a bad idea, as this only rewards them for their criminal efforts. In this particular attack, the user can remove the malware by restarting the system in Safe Mode and performing a scan with an anti-malware product. TrendMicro identifies the malware as TROJ_RANSOM.JM and also provides manual steps for removing it.
source: TrendMicro blog
Paying the creators of ransomware is a bad idea, as this only rewards them for their criminal efforts. In this particular attack, the user can remove the malware by restarting the system in Safe Mode and performing a scan with an anti-malware product. TrendMicro identifies the malware as TROJ_RANSOM.JM and also provides manual steps for removing it.
source: TrendMicro blog
