Threat Database Ransomware PadLock Screen Locker

PadLock Screen Locker

By GoldSparrow in Ransomware

The Padlock Screen Locker is a low-level threat that is used to force computer users to spend their hard earned money. Essentially, the Padlock Screen Locker locks computer users out of their computers. The Padlock Screen Locker displays a full-screen message that contains the image of a padlock. Computer users cannot bypass the Padlock Screen Locker lock screen, which takes the victim's computer hostage. These threats were among the most common types of threats some years ago, but the last couple of years, leading into 2016, have seen the rise of more sophisticated ransomware Trojans, which take the victim's files hostage by encrypting them with a strong encryption Trojan. Although it is possible that the Padlock Screen Locker may be improved to include an encryption functionality, as it stands currently, it is a low-level threat that is relatively simple to remove or bypass.

Ways Used by the Padlock Screen Locker Trojan to Entering a Computer

The Padlock Screen Locker is designed to lock the victim's computer. The Padlock Screen Locker displays a padlock on the infected computer's desktop (this is the reason why the Padlock Screen Locker has received its name from malware researchers). The most common ways of distributing the Padlock Screen Locker include corrupted advertisements on untrustworthy websites, fake updates for Web browsers or software, and pirated software or media currently being distributed on file sharing networks or torrents. Visiting risky websites or engaging in illicit file sharing may include the risk of installing threats such as the Padlock Screen Locker. Advertisements and content on these websites may be poorly monitored and used by con artists to distribute threats.

How the Padlock Screen Locker Carries Out Its Attack

When computer users expose their computers to the Padlock Screen Locker, their machine will be locked. Apart from displaying its lock screen, the Padlock Screen Locker is designed to disable keyboard shortcuts (which could be used to bypass the Padlock Screen Locker pop-up window), as well as tools such as the Windows Task Manager or the Command Prompt, which could be used to remove the Padlock Screen Locker threat or its associated lock screen. The Padlock Screen Locker is nearly identical to a variety of other lock screen threats that have been released in the later half of 2016. The following text is displayed in the Padlock Screen Locker's lock screen:

'Your Files Have Been Deleted &
Your PC Has Been Locked!!!'

Although the victim's PC will have been locked, the Padlock Screen Locker does not have the capacity to delete the victim's files. This message is simply one of the ways in which the Padlock Screen Locker tries to trick computer users into panicking so that they become more likely to pay the Padlock Screen Locker ransom.

Dealing with the Padlock Screen Locker Threat

The Padlock Screen Locker has its unlock code hard coded, meaning that it can be extracted. The unlock code that has been identified in the Padlock Screen Locker's case is 'ajVr/G\RJz0R.' Entering this code into a small text box in the lock screen (without the quotation marks) will disable the Padlock Screen Locker and restore access to the infected computer. The Padlock Screen Locker also may be bypassed by starting up Windows in Safe Mode or using another alternate startup method.

In its current iteration, it is not that hard to deal with the Padlock Screen Locker Trojan. However, it is not out of the question that con artists may release a new version of this threat in the future. The Padlock Screen Locker may be improved to include encryption or to give it the capacity to delete files, rather than only displaying empty threats. Fortunately, for now dealing with the Padlock Screen Locker and similar screen lockers is relatively simple.

SpyHunter Detects & Remove PadLock Screen Locker

File System Details

PadLock Screen Locker may create the following file(s):
# File Name MD5 Detections
1. file.exe a9321e58fb43a2451a253e00cf078268 0

Trending

Most Viewed

Loading...