Malware

How to remove “MSIL/LockScreen.BX”?

Malware Removal

The MSIL/LockScreen.BX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/LockScreen.BX virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/LockScreen.BX?


File Info:

crc32: 5715DE76
md5: 7196e09a74455dd2cbb0d6820a99fd5a
name: 7196E09A74455DD2CBB0D6820A99FD5A.mlw
sha1: c79a8da4617d4374dce1d17aeac7252ace998217
sha256: c45a421fc80405227d4eb0368e26d4117c897253021c928dff1e71c46f4f8f91
sha512: 1cdbe9d0bab5b9e6d591fcb67e8142c4e441a60237f3261090a0dc1fa1e0fd3078abf4c9312a6f153ece7d2342b432fe20f34839475bc77802276f3a2641b868
ssdeep: 6144:KLIBNrR4rwVZVbg+qRwukQHtp3IXfB0fZEE4Gh:MIX6wbVQ1pFBz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: RTD Soft
Assembly Version: 1.0.0.9
InternalName: slender.exe
FileVersion: 5.2.0.9
CompanyName: RTD Soft
LegalTrademarks: RTD Soft
Comments: seo mon
ProductName: real tool
ProductVersion: 5.2.0.9
FileDescription: real tool
OriginalFilename: slender.exe

MSIL/LockScreen.BX also known as:

K7AntiVirusTrojan ( 004cb1481 )
LionicTrojan.Win32.Blocker.j!c
CynetMalicious (score: 99)
ALYacGen:Variant.MSILPerseus.26960
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.582
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 004cb1481 )
Cybereasonmalicious.a74455
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/LockScreen.BX
APEXMalicious
AvastMSIL:LockScreen-H [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.MSILPerseus.26960
NANO-AntivirusTrojan.Win32.Blocker.bondjo
ViRobotTrojan.Win32.A.Blocker.283136
MicroWorld-eScanGen:Variant.MSILPerseus.26960
TencentWin32.Trojan.Blocker.brak
Ad-AwareGen:Variant.MSILPerseus.26960
SophosMal/Generic-S
ComodoMalware@#2hge0564wf7ke
BitDefenderThetaGen:NN.ZemsilF.34058.rq0@a4vASJc
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.7196e09a74455dd2
EmsisoftGen:Variant.MSILPerseus.26960 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Blocker.so
WebrootW32.Malware.Gen
AviraHEUR/AGEN.1101818
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/Racierom.A
GDataGen:Variant.MSILPerseus.26960
TACHYONTrojan/W32.DN-Blocker.283136.B
AhnLab-V3Trojan/Win32.LockScreen.C2318146
McAfeeGenericRXDR-GB!7196E09A7445
MAXmalware (ai score=86)
VBA32Hoax.Blocker
PandaGeneric Malware
YandexTrojan.Barys!GErKL0lcSZA
IkarusTrojan-Ransom.Blocker
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Blocker.HZK!tr
AVGMSIL:LockScreen-H [Trj]
Qihoo-360Win32/Ransom.PornoBlocker.HwMAEpsA

How to remove MSIL/LockScreen.BX?

MSIL/LockScreen.BX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment