Home Malware Programs Trojans Trojan.Ransomlock.E

Trojan.Ransomlock.E

Posted: June 3, 2010

Trojan.Ransomlock.E is another malicious Trojan that presents a security risk for compromised PC systems or a network environments. Trojan.Ransomlock.E should not be taken lightly and contains characteristics of a severe security risk. Trojan.Ransomlock.E penetrates the system without the user's knowledge or permission and easily contacts a remote server to download other harmful parasites onto the infected computer. Symptoms include your computer screen flipping upside down or inverting and documents or messages printing by themselves. Trojan.Ransomlock.E should be removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\Adobe Systems,inc\Foto file\INF.exe
    2 %SystemDrive%\look.jpg
    3 %Windir%\svchost.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\"syshelper" = "1"HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\.korrektor\"(Default)" = "korrektorfile"HKEY_CLASSES_ROOT\korrektorfile\DefaultIcon\"(Default)" = "%ProgramFiles%\Adobe Systems,inc\Foto file\INF.exe,0"HKEY_CURRENT_USER\Control Panel\Desktop\"Wallpaper" = "%SystemDrive%\look.jpg"
Loading...