Click here to visit Original posting
Your computer is locked Screenlocker Removal Guide
- Fri, 02 Dec 2016 13:07:11 EST
- Read 3047 times
The Your computer is locked screen locker is a Trojan that displays a fake security screen stating that the computer has been locked because viruses were detected. It then tells you to contact a Microsoft technician to get a an unlock code to unlock it. Once you enter the correct code, the screen will unlock and another screen will be displayed that contains instructions on how to remove the Trojan.
Thankfully, the unlock code for this scam is easily obtained and can be entered into the field to terminate the screen locker. This unlock code is currently set to 01548764GHEZG784. You can also use the Alt+F4 keyboard combination to shutdown the current variants of this screenlocker.
The text of the screenlocker is:
Your computer has been locked. But dont worries, the files will never delete. Just your computer is locked because your computer has viruses. If you want the code, contact the nearest microsoft technician.
The reason
A unusal activity has been detected on your computer. Your computer might be at risk, and this is the reason the locked your computer. Click on the button to contact the nearest microsoft technician. Click on the button to contact it.
Nearest Microsoft Technician found
Contact: +62 067885169823
|LINE ID: technician460
Once the correct pass code is entered, the alert that is shown will contain this text:
This virus has been made by Soren805.
If you want to remove it, press OK.
This virus disable Alt + F4, CTRL + ALT + DEL and kill explorer.exe.
Inscruction:
1.Go to start menu
2.Go to All programs
3.Go to Startup
4.Remove the file named Sec.exe
If you press OK your computer will now go Normal (Enable task manager) etc...
How did the Your computer is locked screenlocker get on my computer?
It is not currently known how this Trojan is being distributed. It could be distributed using fake software cracks or through free programs you download off of the Internet. As more information becomes available, we will update it here.
If the unlock codes or the Alt+F4 keyboard combination do not properly shut down this screenlocker, you can use the removal guide below to remove it for free.
Array%AppData%\Microsoft\Windows\Start Menu\Programs\Startup\Sec.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sec.exe [path_to]\SecurityRansomware.exe
File Location Notes:
%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\<Current User>\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\<Current User>\AppData\Roaming.