Trojan.Ransomlock.AB

Risk Level 1: Very Low

Printer Friendly Page|Rate this page

Discovered:: February 24, 2013
Updated:: May 1, 2013 2:53:19 PM
Also Known As:: Troj/Ransom-TE [Sophos]
Type:: Trojan
Systems Affected:: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP

Trojan.Ransomlock.AB is a Trojan horse that locks the desktop making the computer unusable. It then asks the user to pay to have it unlocked.

For more information, please see the following resource:
Trojan.Ransomlock

Antivirus Protection Dates

Initial Rapid Release version February 24, 2013 revision 008
Latest Rapid Release version February 24, 2013 revision 008
Initial Daily Certified version February 25, 2013 revision 004
Latest Daily Certified version February 25, 2013 revision 004
Initial Weekly Certified release date February 27, 2013

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Medium
Payload: Asks the user to pay for fake Windows upgrades.
Causes System Instability: Locks the desktop.

Distribution

Distribution Level: Low

Writeup By: Alan Neville

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm