MSIL/LockScreen [Threat Name] go to Threat

MSIL/LockScreen.O [Threat Variant Name]

Category trojan
Size 433701 B
Short description

MSIL/LockScreen.O is a trojan that blocks access to the Windows operating system. The file is run-time compressed using Eazfuscator.NET .

Installation

The trojan does not create any copies of itself.


In order to be executed on every system start, the trojan sets the following Registry entry:

  • [HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Windows NT\­CurrentVersion\­Winlogon]
    • "Userinit" = "%originalvalue%, %malwarefilepath%"
Other information

MSIL/LockScreen.O is a trojan that blocks access to the Windows operating system.


To regain access to the operating system the user is asked to send a certain amount of money to a specific bank account in exchange for the password.


The trojan displays the following dialog box:

Please enable Javascript to ensure correct displaying of this content and refresh this page.