Home > Threats > VirusLocker

What is VirusLocker

Posted on 12 July 2007 under Rogue Programs

1. What is VirusLocker?

It is counterfeit anti-spyware software being spread by a trojan. Infection can be noticed by fake alert balloon continuously coming up and directing to VirusLocker page, expecting user to download rogue software. After PC scan, user is prompted to buy registered program version to remove found security breaches. VirusLocker will not remove spyware and virus as promised.
Also known as VirusLocker 3.4.

Fake security alert:

VirusLocker alert

2. VirusLocker screen shot:


3. How to remove VirusLocker:

  1. Internet connection might be disabled or Internet browser might be blocked by VirusLocker, so it won't be possible to download any files to infected computer. In this case please download all files required for VirusLocker removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove VirusLocker download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove VirusLocker.

  5. Restart the computer to complete VirusLocker removal procedure.

4. VirusLocker files:

VirusLocker.exe, vl_setup.exe (setup file)

5. Hijackthis entries:

O4 - HKLM\..\Run: [VirusLocker] C:\Program Files\VirusLocker\VirusLocker.exe /h