Welcome to the Virus Encyclopedia of Panda Security.
It is designed to blackmail users, by blocking the computer and by asking $12 for some code to unblock it. It does not spread automatically using its own means.
|First detected on:||Sept. 10, 2010|
|Detection updated on:||Sept. 13, 2010|
|Yes, using TruPrevent Technologies
Ransom.AB is a Trojan designed to blackmail users, as it causes the computer to be blocked and asks $12 for some software to unblock the system.
When it is run, it displays on screen an email message in Russian (in case users have the OS in Russian or the corresponding language packet) and prevents users from working with their computer.
This is why it is a malware mainly designed too affected Russian users.
Ransom.AB does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.
Ransom.AB is easy to recognize, as it shows the following symptoms:
- It reaches the computer in a file which has the following icon, passing itself off as a video with content for adults:
- When the file is run, a wallpaper is displayed on screen and the computer is blocked.
- The message displayed on screen informs users that they have to send an SMS and pay $12, so that they can receive some code to unblock the computer.
- If users do not have the OS in Russian or the corresponding language packet installed, they will see the message in the following way: