Selected viruses, spyware, and other threats: sorted alphabetically
To regain access to the operating system use the key generator which can be downloaded here .
The following Registry entry is set:This causes the trojan to be executed on every system start, even in Safe Mode.
The trojan may perform operating system restart.
The trojan creates the following files:The trojan contains a list of (1) URLs. It can send various information about the infected computer. The HTTP protocol is used.
Short description
Win32/LockScreen.B is a trojan that blocks access to the Windows operating system. To regain access to the operating system the user is asked to send an SMS message to a specified telephone number in exchange for a password. When the correct password is entered the trojan removes itself from the computer. Installation
When executed the trojan displays the following dialog box: The trojan does not create any copies of itself. The following Registry entry is set:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Winlogon]
"UserInit" = "%system%\userinit.exe,%filepath%"
Other information
The trojan disables the following key combinations: ALT + F4 . The trojan may perform operating system restart.
The trojan creates the following files:
- a.bat
- %filename%.bin

