look out for Exploit.drop.GSLAD trojan

BugMeister

paranoid android..
Guru
Gold Member
VIP
Local time
2:20 PM
Messages
3,332
Location
UK
looks like a "drive-by" Trojan - and it's a real nasty..

it hi-jacks your Windows installation and denies you access, it
pops up with some message purporting to be from an official police site
warning you that you've been downloading illegal music/film files and child porn..

it even has a spoken message, warning you that your system has been "officially" shut down
along with the usual demands for a considerable payment necessary to re-open it..

- thoroughly evil.. :mad:
 

My Computer My Computer

At a glance

Windows10 Pro - 64Bit vs.10547i7-965 Extreme Edition (8 Cores) at 3.3GHz (n...12G Corsair Dominator DDR3 - tripled2xAMD SapphireNITRO R9 380(4G) crossfire
Computer type
PC/Desktop
Computer Manufacturer/Model Number
benchtec, built to personal specs
OS
Windows10 Pro - 64Bit vs.10547
CPU
i7-965 Extreme Edition (8 Cores) at 3.3GHz (no OC)
Motherboard
BloodRageX58 (Socket1366)
Memory
12G Corsair Dominator DDR3 - tripled
Graphics Card(s)
2xAMD SapphireNITRO R9 380(4G) crossfire
Sound Card
Sonar(SB)X-Fi onboard
Monitor(s) Displays
SyncMaster P2050 20"
Screen Resolution
1600x900 (widescreen)
Hard Drives
480G\OCZSolid3SSD, 64G\OCZVertex3SSD,60G\OCZVertex2SSD, 1TB\spinpointF1SATAHDD
PSU
1200w Power Station Gold
Case
ANTEC 900/2 all blue lights, etc..
Cooling
Noctua SE1366 NH-U12P - a tight fit, but a monster cooler!!
Keyboard
Logitech G19 (wired)
Mouse
Logitech G9 Laser (wired)
Internet Speed
150mb unlimited
Browser
IE11(RP)
Other Info
Xbox One, Nokia735 Windows10 mobile, LG HD/DVD/Blu-Ray r/w, CyberlinkPowerDVD15, LogitechZ5500-SS(5.1), LogitechG35Phones-SS(7.1),MSOffice 2007,CorelDrawX7,Painter2016, Wacom Intuos Pro-SE
Thanks for the info, BugMeister. :)

Did you find a description for Exploit.drop.GSLAD that you can share with us?

Googled it, but did not come up with an official description. What Google finds goes back to o/a December 2012.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
There are videos on Youtube. It claims to be official police software that's "busted" you for child porn and other illegal activities, but you can unlock your PC by paying a fine. Obviously if the cops have evidence of such stuff on you, you're not really going to pay a fine and they'll drop it afterwards.

It can be cleaned but it one of the tricker ones.
 

My Computer My Computer

At a glance

Windows 7 Home Premium x64Intel Pentium Dual Core 2.6 GHz6 GBstock factory for this model
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Gateway DX4822-01
OS
Windows 7 Home Premium x64
CPU
Intel Pentium Dual Core 2.6 GHz
Motherboard
stock factory for this model
Memory
6 GB
Graphics Card(s)
stock factory for this model
Sound Card
stock factory for this model
Monitor(s) Displays
Dell P2010Ht
Screen Resolution
1600 x 900
Hard Drives
1 TB Western Digital
PSU
300 watt
Cooling
80mm case fan, CPU fan, 60mm front intake
Keyboard
Logitech
Mouse
HP 3-button optical wheel mouse
Internet Speed
fiber optic
Antivirus
MSE, SuperAntiSpyware, Malwarebytes Free
Thanks for the info, Diosoth.

Ransomware is very prevalent these days. Lots of variety.

DirtyCecrypt is also a nasty one, and on the rise. The files it encryptes are goners. Currently there is no tool available to decrypt the files.

Your backups will save you, if you have any backups....:huh:
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Ugh, I think I got hit with one of these things as I was watching a Youtube vid. I can't see what popped up on the screen, but there was a voice that came on with a British accent that said, "Our PC has been blocked. You will not be able to use your computer unless you pay the fine through a money packet of $300." I'm not sure if I got the message exactly right, but that's what I thought I heard, awkward wording and all. The message just kept playing, and when I rebooted it booted normally, but I couldn't do anything except load Narator, which is only useful when Jaws conks. I've heard that you can't even fix it with a Windows reinstall. Is this true? Thankfully that was the desktop that needed a reinstall anyway, so there was nothing I was attached to on there.
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Del
OS
Windows 7 64 bit
Antivirus
Microsoft Security Essentials
Browser
Internet Explorer 9

My Computer My Computer

At a glance

Windows10 Pro - 64Bit vs.10547i7-965 Extreme Edition (8 Cores) at 3.3GHz (n...12G Corsair Dominator DDR3 - tripled2xAMD SapphireNITRO R9 380(4G) crossfire
Computer type
PC/Desktop
Computer Manufacturer/Model Number
benchtec, built to personal specs
OS
Windows10 Pro - 64Bit vs.10547
CPU
i7-965 Extreme Edition (8 Cores) at 3.3GHz (no OC)
Motherboard
BloodRageX58 (Socket1366)
Memory
12G Corsair Dominator DDR3 - tripled
Graphics Card(s)
2xAMD SapphireNITRO R9 380(4G) crossfire
Sound Card
Sonar(SB)X-Fi onboard
Monitor(s) Displays
SyncMaster P2050 20"
Screen Resolution
1600x900 (widescreen)
Hard Drives
480G\OCZSolid3SSD, 64G\OCZVertex3SSD,60G\OCZVertex2SSD, 1TB\spinpointF1SATAHDD
PSU
1200w Power Station Gold
Case
ANTEC 900/2 all blue lights, etc..
Cooling
Noctua SE1366 NH-U12P - a tight fit, but a monster cooler!!
Keyboard
Logitech G19 (wired)
Mouse
Logitech G9 Laser (wired)
Internet Speed
150mb unlimited
Browser
IE11(RP)
Other Info
Xbox One, Nokia735 Windows10 mobile, LG HD/DVD/Blu-Ray r/w, CyberlinkPowerDVD15, LogitechZ5500-SS(5.1), LogitechG35Phones-SS(7.1),MSOffice 2007,CorelDrawX7,Painter2016, Wacom Intuos Pro-SE
Back
Top