Trojan.Ransomlock.Q Description

Trojan.Ransomlock.Q is a Trojan that locks the desktop of the compromised PC and makes the computer unusable. Trojan.Ransomlock.Q demands a ransom from the victim to be paid via a certain payment system to unlock the PC. While being executed, Trojan.Ransomlock.Q creates several
infected files and registry entries including one particular entry that enables it to load automatically whenever you turn your computer on. Trojan.Ransomlock.Q finds out the geographical location of the infected computer and illustrates an image specific to a certain location.

Type: Trojans

How Can You Detect Trojan.Ransomlock.Q?

Trojan.Ransomlock.Q Removal Details

Trojan.Ransomlock.Q creates the following files in the system:

• %UserProfile%\Application Data\msconfig.dat
• %UserProfile%\Application Data\msconfig.ini

Trojan.Ransomlock.Q creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\”Shell” = “explorer.exe,%UserProfile%\Application Data\msconfig.dat”
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo

Important Article Disclaimer