Jump to content

SpyLocked

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 122.162.87.243 (talk) at 21:52, 21 April 2007. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

SpyLocked is also known as SpywareLocked, which is a rogue software that seeks to trick the user into purchasing its full rogue version. SpyLocked will issue fake security messages alleging that the user's computer is infected with malicious spyware threats. Once installed, SpyLocked may be very difficult to remove, and may re-install itself after partial removal.

Infection

The method of infection is similar to the delivery methods of all other rogue anti-spyware programs. SpyLocked can infect a computer through web browser security holes, downloading and installing itself through Zlob Trojan.

Problems caused by SpyLocked

Once inside the machine, SpyLocked may cause a variety of problems to the owner of the computer.

  • SpyLocked may generate excessive advertisements and bombard computer screen with unwanted pop-ups.
  • The infected computer may show an icon on the system tray adjacent to the system clock. Clicking the icon will take the user to a rogue anti-spyware site. Even if the message is not clicked, it will intermittently show a message similar to:

"The system has detected a number of active spyware applications that may impact on the performance of your computer. Click the icon to get rid of unwanted spyware by downloading an up-to-date anti-spyware solution.” or a variant of this message.

  • SpyLocked may not allow the user to uninstall it by using Add/Remove function and may recreate itself every time the user tries to remove it manually. Additionally, trying to remove it manually may even lead to a system crash.SpyLocked will deliver fake security messages that user's computer is infected with spyware in order to promote its alleged rogue anti-spyware product.
  • Spylocked may run as a number of different processes including 'isamain.exe' and 'isamntr.exe' These processes usually can not be terminated as they often restart themselves.
  • SpyLocked may block the access to some websites for its purpose to prevent the user from downloading legitimate anti-spyware programs.

Variants

SpyLocked is known to be associated with such rogue anti-spyware programs as Spydawn and SpySheriff. These programs share similar interface with the mentioned anti-spyware applications and have the same deceptive intentions.