Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

To regain access to the operating system use the key generator which can be downloaded here .
Short description
Win32/LockScreen.B is a trojan that blocks access to the Windows operating system. To regain access to the operating system the user is asked to send an SMS message to a specified telephone number in exchange for a password. When the correct password is entered the trojan removes itself from the computer.
Installation
When executed the trojan displays the following dialog box:
The trojan does not create any copies of itself.

The following Registry entry is set:
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
    CurrentVersion\Winlogon]
    "UserInit" = "%system%\userinit.exe,%filepath%"
This causes the trojan to be executed on every system start, even in Safe Mode.
Other information
The trojan disables the following key combinations: ALT + F4 .

The trojan may perform operating system restart.

The trojan creates the following files:
  • a.bat
  • %filename%.bin
The trojan contains a list of (1) URLs. It can send various information about the infected computer. The HTTP protocol is used.