View source for Ransom.IF

{{Botnet
|Fonctionnalités=* Look like based on [[variant of::Silent Winlocker]]
* Mimic Reveton Design of April
* 27-08-2012 target : be, ca, de, es, fi, fr, gr, it, lu, pt, se, uk, us
* 25-05-2012 target : es, fi, fr, gr, lu, pt only

md5:
  7a72a4ec405d856ba67b08ee09910bcf
  361d808ae92cdc5f5b17574d382ff692
  cf682943046e3d690e0f8ae036171c68
  3790c6e44d19c7d5d9365839ac4ae501 18/09/12
  f8a951b5d828088a76b3d86865e3cf57 27/09/12


  GET /police/img_fr/header.jpg HTTP/1.1
  Accept: */*
  Referer: http://  trust.eliasdesigns.biz  /police/lock.php?id=REMOVED_7875768FFCF4256B&key=6E455090EA1C732012EB4A5B5D9E2555

  07/08/12 : harpy.thesecrettemplates.net 62.205.139.57
  18/09/12 : rocky.njrfc.com:80 /win/pc1/police/lock.php?key=6E455090EA1C732012EB4A5B5D9E2555 217.23.12.222 (note : No german design on this one)
  27/09/12 : sharp.eagleviewcommunications.com GET /winl/pc0/police/lock.php 217.23.12.222
|Illustrations==== Copies d'écran ===
{{Illustrations associées}}
|UserAgent=Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
|CCProtocol=
|Target=
|Status=
|BeginYear=
|EndYear=
|Group=Police lock
|Victime4=
}}
== Copies d'écran ==
{|class="wikitable"
|[[Image:Undefined-03 FR.png|center|thumb|300px|Version FR (25 May 2012)]]||[[Image:Undefined-03 ES.png|center|thumb|300px|Version ES (25 May 2012)]] ||[[Image:Undefined-03 PT.png|center|thumb|300px|Version PT (25 May 2012)]] 
|}
For : lu,gr,fi see these [[Reveton]] screenshots to see what you'll get.
{|class="wikitable"
|[[Image:Reveton_2_LU.png|center|thumb|200px|Version LU]]||[[Image:Reveton_2_FI.png|center|thumb|200px|Version FI]]||[[Image:Reveton_2_GR.png|center|thumb|200px|Version GR]]
|}