Risk

RiskTool.Win32.LockDir.i removal instruction

Malware Removal

The RiskTool.Win32.LockDir.i is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What RiskTool.Win32.LockDir.i virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine RiskTool.Win32.LockDir.i?


File Info:

crc32: 07DFCDBA
md5: 95b991d25a843cbf7dc3332832094889
name: lockdir.exe
sha1: c8d6c154688f2af0310489b232cc4949c6a0176a
sha256: babe481d27d4f08ead8ab7e7cd4587ece368eeb746cbb06b65e36e465619afb9
sha512: c884214ad5b248521a09c5f997832f3e9ed003e5bd542f29f8b325342a447e7b764daea28aa1904acc7544a68de6bbbb933eddc56b6e063647aee68621970832
ssdeep: 12288:pVJTwnFofurRXW30P2c/3uvcRYPapxYIfClOR5YXtMQeZAQMzJJct8:1T8FbRm3JEOapxYIgOhQeZA1Jy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2008 KaKaSoft.All rights reserved
InternalName: Folder Protector
FileVersion: 5.3.5.0
CompanyName: KaKasoft
LegalTrademarks:
ProductName: Folder Protector
ProductVersion: 5.3.5
FileDescription: A useful tool to Lock/Encrypt folders, flash disk and Hard drive
OriginalFilename:
Translation: 0x0409 0x04e4

RiskTool.Win32.LockDir.i also known as:

CAT-QuickHealRiskTool.LockDir
VIPRETrojan.Win32.Generic!BT
K7GWUnwanted-Program ( 004b9d9c1 )
K7AntiVirusUnwanted-Program ( 004b9d9c1 )
Invinceaheuristic
SymantecTrojan.Gen.2
GDataWin32.Application.Agent.6PR85P
Kasperskynot-a-virus:RiskTool.Win32.LockDir.i
NANO-AntivirusTrojan.Win32.Parite.dakuve
ZillyaTrojan.Libie.Win32.33
McAfee-GW-EditionBehavesLike.Win32.Dropper.jc
CyrenW32/GenPua.95B991D2!Olympus
Endgamemalicious (high confidence)
ZoneAlarmnot-a-virus:RiskTool.Win32.LockDir.i
McAfeeRDN/Generic PUP.x
AVwareTrojan.Win32.Generic!BT
CylanceUnsafe
ESET-NOD32a variant of Win32/Lockdir.A potentially unsafe
YandexRiskware.LockDir!
MAXmalware (ai score=99)
FortinetRiskware/LockDir

How to remove RiskTool.Win32.LockDir.i?

RiskTool.Win32.LockDir.i removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment