Categories: Malware

Win32/LockScreen.BUE information

The Win32/LockScreen.BUE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/LockScreen.BUE virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Attempts to disable System Restore
Attempts to disable UAC
Anomalous binary characteristics

How to determine Win32/LockScreen.BUE?


File Info:
crc32: 427E9D16md5: 0412cf1201da139d4035b08c80635080name: 0412CF1201DA139D4035B08C80635080.mlwsha1: 0cb44c61647f918ae4a97d72d75c0f4f24d8635bsha256: 1ebef317751dad5c49ce6b90d8a431a945712de1f61871cb0d0c68639413e172sha512: 791daea5402c8af94d8e328b1c79d8f5bb063fadf6f6667b25225e2d1b786dc690ef23ba9c828179173a422bef846968c1d16e7f7cd13c8f7c1bd256cf85d774ssdeep: 12288:zecRYLe5NUn7aPMDkd0L1JLacvHysok8QkPOLaOOcHsDiIF:zecOWnEDQgacZo7QVaIatype: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Version Info:
InternalName: Screen LockerFileVersion: 1.0.0.0ProductName: Screen LockerProgramID: Screen.LockerProductVersion: 1.0.0.0FileDescription: Screen LockerOriginalFilename: Locker.exeTranslation: 0x0409 0x04e4

Win32/LockScreen.BUE also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen12.35454
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/LockScreen.BUE
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Diztakun.gen
NANO-Antivirus	Trojan.Win32.Diztakun.iuijma
BitDefenderTheta	Gen:NN.ZelphiF.34722.Zi0faWZiS1gi
FireEye	Generic.mg.0412cf1201da139d
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Hynamer.C!ml
ZoneAlarm	HEUR:Trojan.Win32.Diztakun.gen
AhnLab-V3	Malware/Win32.Generic.C4284095
VBA32	TScope.Trojan.Delf
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazqC7lGe/CkOm9S4Og9kijdi)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/LockScreen.BUE!tr.ransom