MSIL/LockScreen [Threat Name] go to Threat

MSIL/LockScreen.D [Threat Variant Name]

Category trojan
Size 944128 B
Detection created Apr 19, 2010
Detection database version 5042
Aliases Trojan:Win32/Comisproc (Microsoft)
  GenericDownloader.x!ean.trojan (McAfee)
Short description

MSIL/LockScreen.D is a trojan that blocks access to the Windows operating system. The file is run-time compressed using UPX .

Installation

When executed, the trojan creates the following files:

  • %temp%\­%variable%\­data.exe (180736 B)
  • %temp%\­%variable%\­data.scr (68662 B)
  • %temp%\­%variable%\­data1.scr (650240 B)
  • %temp%\­%variable%\­data2.scr (440832 B)
  • %temp%\­%variable%\­data3.exe (179200 B, MSIL/LockScreen.D)
  • %temp%\­%variable%\­data4.exe (71168 B)
  • %temp%\­%variable%\­Programm v1.0.bat (1650 B, MSIL/LockScreen.D)

The files are then executed.

Other information

MSIL/LockScreen.D is a trojan that blocks access to the Windows operating system.


The trojan displays the following picture:

The trojan displays the following dialog boxes:

The trojan executes the following command:

  • shutdown -s -t 9000000 -c "Hacked by noah.n"

Please enable Javascript to ensure correct displaying of this content and refresh this page.