SpywareLocker Description

 

 

[+] Click Image to Enlarge

 

 

Cart

SpywareLocker is a corrupt spyware removal tool created to persuade users into purchasing its full commercial version. SpywareLocker may be installed through browser security loopholes or other unconventional mechanisms. Once executed, SpywareLocker will launch on every Windows boot and will start generating fake warnings regarding your computer security. SpywareLocker may appear difficult to manually remove because it can secretly renew and mutate itself.

Type: Trojans

How Can You Detect SpywareLocker?

SpywareLocker Technical Report

As new SpywareLocker details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following SpywareLocker files with its MD5s were created in the system:

SpywareLocker has typically the following processes in memory:

• SpywareLocker1.dll
• SpywareLocker0.dll
• SpywareLockerSetup[1].exe
• SpywareLocker.exe
• SpywareLocker3.dll

SpywareLocker created the following directories, files, paths:

• %ProgramFiles%\SpywareLocker

SpywareLocker creates the following registry entries:

• HKEY_USERS\[ALL USERS]\Software\Microsoft\Windows\CurrentVersion\Run\”SpywareLocker” = “C:\Program Files\SpywareLocker\SpywareLocker.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpywareLocker
• HKEY_USERS\[ALL USERS]\Software\SpywareLocker
• SpywareLocker

Important Article Disclaimer