Categories: Malware

About “Win32/LockScreen.AQH” infection

The Win32/LockScreen.AQH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/LockScreen.AQH virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Russian
Installs itself for autorun at Windows startup
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Win32/LockScreen.AQH?


File Info:
crc32: 5A5479D4md5: b968f430e70ceff8ec20de6343ac40baname: B968F430E70CEFF8EC20DE6343AC40BA.mlwsha1: dff6fc90a85127933a7224a38a885b80ceea5333sha256: 924693823399ed4cc07b377e159b0778a08555860b41e66f9c0b9cf9e0d05fecsha512: 0433f636d5186c099c7e680b06c3d88edf08633385facf332fd7873cdd7478e85c7889dd8c207184e0449ac90aa7f99b21244e90230239989cf4ef1e6069765assdeep: 12288:mQqiP6V19gJUirG8ckVAOE7cifIqmpZZEmCnT61dP:PTS2yKsCmAlEmC21type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/LockScreen.AQH also known as:

DrWeb	Trojan.Siggen7.56986
Cynet	Malicious (score: 99)
ALYac	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/LockScreen.ee53739c
K7GW	Trojan ( 00521dbc1 )
K7AntiVirus	Trojan ( 00521dbc1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/LockScreen.AQH
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc
NANO-Antivirus	Trojan.Win32.LockScreen.fhpkjd
MicroWorld-eScan	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc
Tencent	Win32.Trojan.Lockscreen.Pgcu
Ad-Aware	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc
Comodo	Malware@#q3z8qcbwdi15
BitDefenderTheta	AI:Packer.E886299821
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.bm
FireEye	Generic.mg.b968f430e70ceff8
Emsisoft	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc (B)
Jiangmin	Trojan.Generic.cpyvg
Avira	TR/Ransom.ruywk
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Arcabit	Trojan.ShellStartup.EBD2122
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Trojan.ShellStartup.WGW@a0@Fi@oc
McAfee	Artemis!B968F430E70C
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Swisyn
Malwarebytes	MachineLearning/Anomalous.95%
Panda	Trj/GdSda.A
Rising	Trojan.LockScreen!8.1AF (CLOUD)
Yandex	Trojan.GenAsa!53MLJ3tJKN0
Ikarus	Trojan.Win32.LockScreen
Fortinet	W32/LockScreen.AQH!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml