Win32/LockScreen [Threat Name] go to Threat

Win32/LockScreen.AJV [Threat Variant Name]

Category trojan
Size 2153930 B
Detection created Jan 30, 2012
Detection database version 6840
Aliases Trojan-Ransom.Win32.Delf.ig (Kaspersky)
  Trojan:Win32/Ransom.IO (Microsoft)
Short description

Win32/LockScreen.AJV is a trojan that blocks access to the Windows operating system. To regain access to the operating system the user is asked to send a certain amount of money to a specific bank account in exchange for the password.

Installation

The trojan does not create any copies of itself.


The trojan creates the following files:

  • %temp%\­MSB4Res1\­RFile1.png (122561 B)
  • %temp%\­MSB4Res1\­start.bat (70 B)

The trojan runs the following process:

  • %temp%\­MSB4Res1\­start.bat
Other information

Win32/LockScreen.AJV is a trojan that blocks access to the Windows operating system.


To regain access to the operating system the user is asked to send a certain amount of money to a specific bank account in exchange for the password.


The trojan displays the following dialog box:

When the correct password is entered the trojan is deactivated.


The password to regain access to the operating system is one of the following:

  • 13912156013

Please enable Javascript to ensure correct displaying of this content and refresh this page.