Het gijzelen van bestanden blijft een populaire tactiek bij virusschrijvers, want er is weer nieuwe malware ontdekt die vertrouwelijke documenten kaapt. Alleen als slachtoffers 150 dollar betalen krijgen ze hun bestanden terug. De Trojan, die nog nauwelijks door virusscanners wordt herkend, versleutelt txt, xls, doc, pps, ppt, docx, xlsx, pptx, rtf, mdb, vsd, vst, csv, mpl, zip en rar bestanden.

Na het versleutelen plaatst het het tekstbestand README_ASAP.txt, waarin het de gebruiker voor de slechte beveiliging van zijn of haar systeem waarschuwt. "Voor uw veiligheid hebben wij al uw bestanden versleuteld voordat iemand dit anders kan doen: hacker, virussen of een stomme vandaal."

Dear User,

Thank you for using our service.
We've recently inspected your system and found out many critical security holes.
It's not a joke, and it bring out clearly that we were able to crypt all of your text files, documents, archives and data files.
For your security we did it before than someone else: hacker, virus or just stupid vandal.
In world, hijackers are hunting for your bank account, credit card information, or something valuable.
Now, even if they'll hack your computer they steal nothing, because all of your important files are now crypted and secured. There is no technology or scientific method to crack this kind of encrypting in near future Unfortunatelly as like other job, our services cost money. Just only 150$ US dollars. It is worth much less than if you loose all your files.
We accept only Western Union, and we garantee that your'll receive decrypting program with detailed manual in less than hour after we'd received your payment.
If you need your information back, just send an email to:

[verwijderd]

and we'll send you further instructions in 5 minutes.
Do not worry, you'll get all back in hour after we get Western Union Transfer details. ONLY IN ONE HOUR!!!
We are sorry for your inconvenience, but better we and less, than somebody and more.