Malware

Win32/LockScreen.BSO removal instruction

Malware Removal

The Win32/LockScreen.BSO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/LockScreen.BSO virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Anomalous binary characteristics

How to determine Win32/LockScreen.BSO?


File Info:

crc32: F2A40DD5
md5: 6e1b24bac2ca27ffc3d8f0db100cf590
name: 6E1B24BAC2CA27FFC3D8F0DB100CF590.mlw
sha1: cb2cfb3b9734adbc2897c9bcc127f54aaa8f7faf
sha256: ea54f7d215b30b3074379058232651db37f15276abf480ea9b1d11f993703531
sha512: fbee9fef77e965e91bd73dc6be5ab4a47b1370342e8587d45e1b58871be8c8fc52d043680b95dc447b196d49b3df6eca5335472b4cc050038f1a23fddeb440d9
ssdeep: 3072:yBgjS2GJyRGvl3hF85k+6LLH1zN14GPEdGVM9h9kKhnsE7n6yDcPNyer:yfMG9RFsULVxbPEdGV0AIs062cPNrr
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Win32/LockScreen.BSO also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.KillProc.26668
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.190520
CylanceUnsafe
ZillyaTrojan.Gimemo.Win32.8819
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaRansom:Win32/Gimemo.edb8772f
Cybereasonmalicious.ac2ca2
CyrenW32/LockScreen.G.gen!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/LockScreen.BSO
APEXMalicious
AvastWin32:Agent-ATUS [Trj]
ClamAVWin.Ransomware.Gimemo-6725202-0
KasperskyTrojan-Ransom.Win32.Gimemo.cdqu
BitDefenderGen:Variant.Zusy.190520
NANO-AntivirusTrojan.Win32.Gimemo.foalcc
MicroWorld-eScanGen:Variant.Zusy.190520
TencentWin32.Trojan.Gimemo.Wpjv
Ad-AwareGen:Variant.Zusy.190520
SophosMal/Generic-S
ComodoTrojWare.Win32.Ransom.Somhoveran.C@849qai
TrendMicroMal_LockScreen
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.6e1b24bac2ca27ff
EmsisoftGen:Variant.Zusy.190520 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Gimemo.tj
AviraTR/Strictor.oiuya
Antiy-AVLTrojan/Generic.ASBOL.1B18
KingsoftHeur.SSC.2686244.1216.(kcloud)
MicrosoftRansom:Win32/Somhoveran
ArcabitTrojan.Zusy.D2E838
AegisLabTrojan.Win32.Gimemo.4!c
GDataWin32.Trojan-Ransom.Somhoveran.A
McAfeeGenericRXAA-FA!6E1B24BAC2CA
MAXmalware (ai score=99)
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/CI.A
TrendMicro-HouseCallMal_LockScreen
YandexTrojan.Gimemo!AtaT/XOm9T4
IkarusTrojan-Ransom.Somhoveran
MaxSecureTrojan.Malware.9553181.susgen
FortinetW32/LockScreen.AW!tr
AVGWin32:Agent-ATUS [Trj]
Paloaltogeneric.ml

How to remove Win32/LockScreen.BSO?

Win32/LockScreen.BSO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment