Malware

How to remove “Win32:LockScreen-VB [Trj]”?

Malware Removal

The Win32:LockScreen-VB [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:LockScreen-VB [Trj] virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32:LockScreen-VB [Trj]?


File Info:

crc32: 2C5FDC7A
md5: b1af2415fdab96877cb77e643a07d170
name: B1AF2415FDAB96877CB77E643A07D170.mlw
sha1: 2d76b1d60e9dad1bd2c1c8c92502cd4147ae0cee
sha256: bb94dac021f3476f6cbaac394e111663b1d6c778c4ac84caa1d08c3f890f4b07
sha512: beeb0da96f95c097f083be5aa804412f9f24004c4171d9955d367d16ebcb94a26b5e3e8a1e882c42ce055b7b9b5ee478b9257ea36959d0bb8aced05050719c97
ssdeep: 1536:j7LSavSu1/BFm5nbK2j9kPkqniBP9PkbOq8meRLVOmpLPXhfTRTp/:zSavSYlGVP9PkiqzFmRRLRd/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32:LockScreen-VB [Trj] also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebBackDoor.Andromeda.177
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.Foreign.Win32.7520
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Urausy.cd3bdb18
Cybereasonmalicious.5fdab9
SymantecTrojan.Zbot
APEXMalicious
AvastWin32:LockScreen-VB [Trj]
SophosMal/Generic-R + Mal/EncPk-AKK
ComodoMalware@#b5jbq56nvogi
VIPRETrojan.Win32.Reveton.a (v)
TrendMicroTSPY_ZBOT.SML0
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.b1af2415fdab9687
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Foreign.qfo
WebrootTrojan.Dropper.Gen
eGambitGeneric.Malware
Antiy-AVLTrojan/Generic.ASMalwS.165084
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Urausy.C
AegisLabTrojan.Win32.Graftor.4!c
Acronissuspicious
McAfeePWS-Zbot-FBFN!B1AF2415FDAB
MAXmalware (ai score=99)
VBA32Hoax.Foreign
PandaGeneric Malware
TrendMicro-HouseCallTSPY_ZBOT.SML0
RisingRansom.Urausy!8.2B7 (CLOUD)
IkarusVirus.Win32.Cryptor
FortinetW32/Zbot.AAO!tr
AVGWin32:LockScreen-VB [Trj]
Paloaltogeneric.ml

How to remove Win32:LockScreen-VB [Trj]?

Win32:LockScreen-VB [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment