Remove Trojan.Ransomlock.D

Posted on: October 30th, 2009


Discovered: October 27, 2009
Updated:

October 27, 2009 2:58:02 PM
Type:

Trojan
Systems Affected:

Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
Recommended Action:
In order to Remove Trojan.Ransomlock.D you need to Download the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of Trojan.Ransomlock.D.. Read our full No Adware Review.

No Adware Review

Technical Details:

When the Trojan is executed, it copies itself to the following location:
%Windir%\activate.exe

It also creates the following shortcut for the above file:
%UserProfile%\Start Menu\Programs\Startup\Quick Office.lnk

Next, the Trojan modifies the following registry entry in order to disable the
Windows Task Mangager:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Policies\System\”DisableTaskMgr” = “1″

The Trojan then hooks the keyboard to prevent anything except numbers
from being typed.

Action Steps:
FREE SCAN: NoAdware can Remove Trojan.Ransomlock.D. Click the link below for your free download & scan your PC now.

Please click here for manual removal instructions.

Posted on Friday, October 30th, 2009 at 12:00 pm - filed under Blog, Trojan.