Threat Database Trojans Trojan:Win32/Loktrom.A

Trojan:Win32/Loktrom.A

By Domesticus in Trojans

Threat Scorecard

Ranking: 16,439
Threat Level: 100 % (High)
Infected Computers: 103
First Seen: November 15, 2012
Last Seen: August 9, 2023
OS(es) Affected: Windows

Trojan:Win32/Loktrom.A is a Trojan that is used by cybercriminals to distribute Russian ransomware. Trojan:Win32/Loktrom.A locks the targeted PC and does not allow victims to access the desktop and use keyboard. Trojan:Win32/Loktrom.A showss a pop-up alert on the screen of the infected computer declaring that the PC user has been identified to perform illegal activities on the computer. Trojan:Win32/Loktrom.A asks a victim to pay a fine to a given mobile phone account to restore access to a compromised PC. Trojan:Win32/Loktrom.A may create a randomly-generated file name. Trojan:Win32/Loktrom.A also creates the certain registry entries so that it can load automatically every time you start Windows. Trojan:Win32/Loktrom.A declares that after paying the fine, you will be sent an unlock code to regain access to your computer system. Trojan:Win32/Loktrom.A also trickily claims association with Windows and Microsoft Security Essentials, when, in truth, it is not linked to Windows or Microsoft.

Registry Details

Trojan:Win32/Loktrom.A may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon = "Shell" = "[malware file name]"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "explorer" = "[malware file name]"

Messages

The following messages associated with Trojan:Win32/Loktrom.A were found:

Your account is suspected in the unauthorized activity and requires immediate validation. If no validation is performed the account will be blocked, are you sure you want to leave this page?

Trending

Most Viewed

Loading...