Ransom

Ransom:Win32/LockScreen.H malicious file

Malware Removal

The Ransom:Win32/LockScreen.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/LockScreen.H virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Ransom:Win32/LockScreen.H?


File Info:

crc32: 29434805
md5: 06c5003e5801bd6ec7c13b0755cbefb3
name: 06C5003E5801BD6EC7C13B0755CBEFB3.mlw
sha1: 2cf5b326d7d859cf4e56872d7b28b1c13aac72b2
sha256: 11e86471af5ba2a06bb10e325f735a57f266596e3cf0092e18d0c4787722c7df
sha512: 22d6e00852468965880d23ecaaabbbd3e833a6f2256e4fc8657ee6806a0262417f41efee2336cbb82561406f092e80e0893fd1986e9965fab8759af371754dda
ssdeep: 3072:43butLsMZ0mNZkygCwkGNxzlThIiVMsqlUCr6QfZ6R+k1IV:4LmLBMygCw/TzZhA30
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2010
InternalName: Setup
FileVersion: 10,78,100,956
ProductName: Setup
ProductVersion: 10,78,100,956
FileDescription: Setup
OriginalFilename: Setup
Translation: 0x0000 0x04b0

Ransom:Win32/LockScreen.H also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Strictor.45395
FireEyeGeneric.mg.06c5003e5801bd6e
Qihoo-360Win32/TrojanDropper.Generic.HwoCq28A
ALYacGen:Variant.Strictor.45395
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005326cf1 )
BitDefenderGen:Variant.Strictor.45395
K7GWTrojan ( 005326cf1 )
Cybereasonmalicious.e5801b
BitDefenderThetaAI:Packer.78781AB61F
CyrenW32/Risk.RTEC-2701
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.Pinkblocker-130
KasperskyHEUR:Trojan.Win32.Generic
AlibabaRansom:Win32/LockScreen.d1c960a6
NANO-AntivirusTrojan.Win32.PinkBlocker.bfhvt
AegisLabTrojan.Win32.Generic.4!c
RisingRansom.LockScreen!8.83D (CLOUD)
Ad-AwareGen:Variant.Strictor.45395
EmsisoftGen:Variant.Strictor.45395 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Winlock.1448
ZillyaTrojan.PinkBlocker.Win32.656
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
SophosMal/Generic-S
IkarusTrojan-Dropper.Win32.Blocker
JiangminTrojan/XBlocker.cv
WebrootTrojan:Win32/Bojotuc.A
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.AGeneric
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/LockScreen.H
ArcabitTrojan.Strictor.DB153
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Strictor.45395
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Pinkblocker.C4014878
McAfeeGenericRXAA-AA!06C5003E5801
MAXmalware (ai score=100)
VBA32Hoax.PinkBlocker
MalwarebytesMalware.AI.596253126
PandaGeneric Malware
TencentWin32.Trojan.Pinkblocker.cor
YandexTrojan.GenAsa!74gb6aru76M
SentinelOneStatic AI – Suspicious PE
FortinetW32/PinkBlocker.ASM!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
MaxSecureTrojan.Malware.1396679.susgen

How to remove Ransom:Win32/LockScreen.H?

Ransom:Win32/LockScreen.H removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment