Virus.Win32.GpCode.af
05 Jun 2006 19:49:00 +0400
Kaspersky Lab has received reports of yet another variant of GpCode, the cyberblackmail virus- Virus.Win32.GpCode.af. This new variant is currently spreading on the Russian Internet. It encrypts user files; the author then demands money for decrypting the files.
This latest variant differs from the one that appeared last Thursday in that it uses a more secure encryption algorithm - RSA 330 bit rather than the RSA 260 bit key the previous variant used.
Kaspersky Lab strongly recommends that anyone who has had files encrypted should contact the Virus Lab. Under no circumstances should users give in to blackmail, as this will encourage the authors of this program to create new versions.
Detection and decryption routines have been added to the Kaspersky Anti-Virus databases. If your files remain encrypted after running a full scan of your computer with updated antivirus databases, please send your files to the Virus Lab at newvirus@kaspersky.com.