Home Malware Programs Ransomware MadLocker Ransomware

MadLocker Ransomware

Posted: December 26, 2015

Threat Metric

Threat Level: 10/10
Infected PCs: 20
First Seen: December 28, 2015
OS(es) Affected: Windows

The MadLocker Ransomware is a PC locker Trojan that specializes in interfering with server-related processes. Although the MadLocker Ransomware is more specialized than many, more widely-traveled types of locker Trojans, its payload may have the same side effects and facilitate the same associated attacks. Once the MadLocker Ransomware is identified, deleting the MadLocker Ransomware always is something to do by following standard PC security steps for disabling the MadLocker Ransomware and then scanning the infected PC with the anti-malware program of your choice.

The MadLocker Ransomware: An Old Ransomware Campaign to Stay Furious About

While malware researchers may see PC-based ransom tactics using generalized attacks, such as locking your Windows desktop, other variants of the same threat theme sometimes are narrower in scope. The MadLocker Ransomware, also known as DMA Locker, is a niche locker Trojan that combines its system-locking attacks with a Denial-of-Service function. DoS attacks, which use artificial traffic floods to overload and crash servers, may be seen being coordinated against the large server machines of major businesses, such as banks. However, they and the MadLocker Ransomware are equally effective against smaller servers and personal PCs.

Besides crashing processes specific to running servers, the MadLocker Ransomware also may lock Yahoo!-based accounts for up to 24 hours. Different versions of the MadLocker Ransomware also have been reported as having the ability to block non-Yahoo messaging software, as well as some social networking and media websites.

Because many con artists may administer the MadLocker Ransomware, the consequences of its attacks may vary between separate incidents. Threat authors may use the MadLocker Ransomware and similar locker Trojans as ways to block your access to your machine while demanding money for unlocking the system. This ransom threat often includes no real means of reversing the attack, and typically includes a fraudulent time limit that the Trojan isn't capable of enforcing.

Escaping the MadLocker Ransomware Madness

DoS attacks are a well-known but evolving technique that have existed for years. Although some of the earliest samples of the MadLocker Ransomware date as long ago as 2003, malware researchers continue seeing similar attacks in the present day. Popular techniques for infiltrating business, NGO and government systems with Trojans like the MadLocker Ransomware tend to focus on disguised e-mail attachments. However, the MadLocker Ransomware's modern day distribution isn't limited to spam; the MadLocker Ransomware also has been seen being promoted on Portuguese free software forums. These links advertised the MadLocker Ransomware as a browser blocker for adult content.

Although the possible benefits of 'nanny' applications are obvious to parents, you always should be careful to install products that only are promoted by trustworthy businesses. Going to disreputable sources for downloads may cause your PC to suffer from ransom schemes like the MadLocker Ransomware's attacks. Of course, seeing symptoms of the MadLocker Ransomware infections, such as unusual server activity or blocked access to Yahoo services, always can be resolved by scanning your PC with the right anti-malware program.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\fakturax.exe File name: fakturax.exe
Size: 89.63 KB (89632 bytes)
MD5: 6fbd3cdcafd6695c384a1119873786aa
Detection count: 48
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: December 29, 2015
Loading...