Gimemo Ransom - Germany - "Please wait while the connection is beeing established" - Known File Names

This list will be maintained.

I will try to organize them in chronological order

______________________________________________________________________________

flint4ytw.exe - 21e582cc765de5bb58191200e9f54e77 - VT
ram_reserver64.exe - f8eeecb3c9ea0ace4e485fd1611fa1ab - VT
soundblaster_fx648.exe - cffc2bfa4f74e2a0bb04427f1048b29f - VT
itunes_service01.exe - fd3f7aaef6b290ac4c1d6ebcb36209c9 - VT
itunes_service86.exe - 7944a9eaac350ae8c8a0d2ddfcc07201 - VT
BSI.bund.exe - d1f3c1efbc75d4cdc53241d85cbb8caf - VT
ksprskylabs1.exe - 520016557adaa13daed88d0e45f400f6 - VT
InfoServices_a.exe - 489284c7665739d79697aabda99f41a7 - VT
Game.exe - 489284c7665739d79697aabda99f41a7 - Seen with InfoServices_a.exe - VT
ServiceVBOX.exe - 09591584d659223c5e8733342d713c83 - VT
game_client.exe - VT
SboxService.exe - 5dd62ab5baa65ed9785d01b377622b75 - VT 
ArchiverforWin.exe [] - VT
Diablo_III.exe - d5f4f463d92d78ffbe8326da81b59b50 - VT
WhpAkc.exe - VT
ArchiverforWin.exe [thehrgergergeg] - VT
Apple_Store.exe [tfytfyffytf] - 2ae166c2abc5e380c35dea3ab7a8d7f1 - VT
Apple_Store.exe [Adobe Systems, Incorporated] - f28f9cb1ff043c109797454bde26e269 - VT
AMD_cpx.exe - VT
WinrarArchiver - 0fce6d3421f3f21e7d6214059fe5bad0 - VT
WinrarArchiver - 24a067e94f182a522bcd38c06b4b38d4 - VT
RarArchiverWin.exe [Nonprofit organization offering health, educational, and distance learning Internet broadcasting services] - VT
Apple_Store.exe - [Nonprofit organization offering health, educational, and distance learning Internet broadcasting services] - VT
TarArchiver.exe [SEIKO EPSON CORP.] - 61eceef56f8e8faf8b0a70d3326331e1 - VT
CodeArchiver.exe - 6562d74b5a93f8c8cb537be10d873f46 - VT
TarArchiver.exe - [CJSC "Computing Forces"] - VT
Dickemoepse.exe - a31e35aa09218d4254e4a0fbbd6364b - VT
Smoerrebroe.exe - VT
Warcraft.exe - 07dbb4542299a2a1b7480932f8a25d5b - VT
Schnarch.exe - c4f7a18db6aa1ef57c3f53a050d77ce9 - VT 

______________________________________________________________________________

For help with removal, see the following pages:

• GEMA - Germany (Ransom Trojan) - 03.29.2012 - Analysis and Removal 
• GVU - Germany (Ransom Trojan) - 04.16.2012 - Analysis and Removal

If you need additional assistance, visit MajorGeeks.com and create a topic in the Malware Removal forum.
______________________________________________________________________________