Trojan claims to be on police business
Source: AV-Test Security firm AV-Test has warned of a new trojan that targets Windows PCs (XP, Vista, Windows 7) and displays a notice allegedly sent by the German Federal Criminal Police Office about illegal PC content. The notice says that the computer has been locked down because of this illegal content and will only be unlocked once the user has paid €100 through an anonymous payment service, and that otherwise the user's hard disk will be erased. This is, of course, a scam.
AV-Test says that the malware blocks any system access. The trojan apparently injects itself into more than 30 places in the registry so that it is always executed straight after the system has started. It reportedly also prevents users from accessing the Registry Tools and the Task Manager. The security firm says that the malware is currently not detected by all anti-virus programs, but that AV vendors have been informed. Should a PC have already become infected, the experts recommend using a recovery CD.