Trojan:AutoIt/LockScreen.A Removal Guide

Threat Level:
8/10
Rate this Article:
Comments (0)
Article Views: 12912
Category: Trojans

Trojan:AutoIt/LockScreen.A is another cunning computer infections which can also be referred to as ransomware. As the name of the Trojan suggests, this threat locks your screen; moreover, it starts a lot of malicious processes, which is done to prevent you from accessing the system. The threat has been detected in August 2012 and it seems that the use of such infections as Trojan:AutoIt/LockScreen.A is getting one of the major issues in the cyber world.

The reason why Trojan:AutoIt/LockScreen.A locks the computer down is that the creators of the infection seek to get computer users’ money. The Trojan displays a warning which covers the whole screen and which also contains some key elements which make unsuspecting users believe that they have to pay money in order to unlock the computer. For instance, the warning may contain the logo of an institution to make him/her believe that the full-screen message is legitimate and that the institution, for instance, GVU, FBI or any other, has initiated an extensive investigation. Moreover, the warning can be written in various languages including such European languages as French, German, Swedish, Spanish, Italian and others. According to the warnings displayed by the threat, you are charged with copyright infringement, and in order to avoid legal prosecution, you are supposed to pay a fine.

The warning displayed by the Trojan is a scam; hence you should remove it from the PC as soon as you can. Keep in mind that like other dangerous Trojans, this one in question has a lot malicious files, too. For example, one of the files which should be removed along with the Trojan is M3srchmn.exe and it is able to monitor your information inputs, disable access to the Registry Editor and Task Manager, disables Safe Mode and Windows Security Center so that you do not receive Firewall security notifications. One more file which is attributed to Trojan:AutoIt/LockScreen.A is ibsvc.exe, like the one discussed earlier, is located in the subfolders of the Program Files folder and it can change the settings of some programs; additionally, it can also monitor other applications. Bear in mind that it is not advisable to keep the infection on the PC for a long time as it can function as a backdoor Trojan and download new harmful files.

Due to the fact that the threat has a lot of additional components, it is not advisable to delete it manually as some important files may be missed. Hence you should scan the PC with a powerful spyware removal tool so that the infection is fully removed.

How to remove Trojan:AutoIt/LockScreen.A

Windows Vista and Windows 7

  1. Restart the computer.
  2. Wait for the BIOS startup screen to load and start tapping the F8 key.
  3. Select Safe Mode with Networking using the up or down arrow key and press Enter.
  4. Open the browser and go to http://www.411-spyware.com/download-sph to download our spyware removal tool.
  5. Install the application and delete the infection.

Windows XP

  1. Reboot the computer.
  2. Tap the F8 key as soon as the BIOS startup screen loads.
  3. Use the up or down key to select Safe Mode with Networking and press Enter.
  4. Click on Yes.
  5. Open the Start menu.
  6. Launch Run.
  7. Type msconfig in the Open box and press OK.
  8. Open the Startup tab.
  9. Click Disable All and then Apply.
  10. Download our anti-spyware tool.
  11. Restart the computer.
  12. Install the program and scan the PC.

Windows 8

  1. Press the Windows key to access your Start Menu.
  2. Click the Internet Explorer tile.
  3. Type http://www.411-spyware.com/download-sph and download SpyHunter.
  4. Install the tool, remove the infection and restart the computer.
Download Remover for Trojan:AutoIt/LockScreen.A *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *