Deletes data and uploads porn

Reports are coming in of a Trojan that demands a ransom from users and threatens to delete data if payment is not made.

Troj/Ransom-A threatens to delete one file belonging to the user every 30 minutes, until the $10.99 ransom demand is fulfilled. The Trojan is spreading as a disguised file on peer-to-peer networks and may also have been spammed out.

Once the file is activated it displays pornographic images and the following message: 'Listen up muthafucka. is this computer valuable. it better not be. is this a business computer. it better not be. do you keep important company records or files on this computer. you'd better hope not. because there are files scattered all over it tucked away in invisible hidden folders undetectable by antivirus sofware the only way to remove them and this message is by a CIDN number.'

The 'CIDN number' can be obtained by putting the cash in a Western Union account and the writer includes his email address in case any of his victims have problems with the installation. Police are investigating both leads.

"This one's not the smartest tool in the box," said Graham Cluley, senior technology consultant for Sophos. "We've passed the details on and the police are looking into this one."

The code has a number of other taunts for the infected. If the user tries to shut down the PC using Control Alt Delete the malware blocks the action and displays a new message.

'Yeah, We don't die, We multiply! Ctrl+Alt+Del isn't quite working today, is it? I'm not the sharpest tool in the shed but Crtl+Alt+Del is everyone's S.O.S.'