MSIL/LockScreen [Threat Name] go to Threat
MSIL/LockScreen.D [Threat Variant Name]
| Category | trojan |
| Size | 944128 B |
| Aliases | Trojan:Win32/Comisproc (Microsoft) |
| GenericDownloader.x!ean.trojan (McAfee) |
Short description
MSIL/LockScreen.D is a trojan that blocks access to the Windows operating system. The file is run-time compressed using UPX .
Installation
When executed, the trojan creates the following files:
- %temp%\%variable%\data.exe (180736 B)
- %temp%\%variable%\data.scr (68662 B)
- %temp%\%variable%\data1.scr (650240 B)
- %temp%\%variable%\data2.scr (440832 B)
- %temp%\%variable%\data3.exe (179200 B, MSIL/LockScreen.D)
- %temp%\%variable%\data4.exe (71168 B)
- %temp%\%variable%\Programm v1.0.bat (1650 B, MSIL/LockScreen.D)
The files are then executed.
Other information
MSIL/LockScreen.D is a trojan that blocks access to the Windows operating system.
The trojan displays the following picture:
The trojan displays the following dialog boxes:
The trojan executes the following command:
- shutdown -s -t 9000000 -c "Hacked by noah.n"