View source for Fake FBI Ransomware analysis

{{Publication
|Image=fake-fbi-ransomware-analysis.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blogs.avg.com/news-threats/fake-fbi-ransomware-analysis/
|Author=Hynek Blinka, 
|NomRevue=AVG Official Blogs
|Date=
|Editor=AVG
|Year=2012
|ISBN=
|Page=
|Abstract=In our previous blog post our AVG Web Threats Research group analyzed a Blackhole exploit kit serving the fake FBI Ransomware. Today we will have a look at the ransomware itself.

* Payload

Here is a typical ransom malware payload once it’s active on infected computer:

User’s desktop is locked with a full-screen information displayed
 Task manager and Registry editor is disabled
System hot keys are disabled to avoid the Trojan’s termination
This is a screenshot from a system infected by fake FBI Ransomware; the criminals ask for 100 pounds to unlock the infected system
|Botnet=Reveton, 
|Malware=, 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}