Grinler
Mar 19 2007, 11:31 PM
A new rogue anti-spyware program has been released as of tonight called SpyLocked.This program is part of the family of other Zlob installed programs such as SpyDawn, SpywareQuake, and VirusBurst to name a few. When run these programs display fake and exaggerated infection results used to scare you into purchasing the commercial version of their software. Under no circumstances should you purchase this software.
These programs are typically installed via the Zlob Trojan which masquerades as a fake audio or video codec. The Zlob Trojan is considered one of the most wide spread malware types so please be careful when downloading and installing new codecs. If you are unsure of what you are downloading, you can always ask us in the
forum. A picture of the SpyLocked program can be found below.
If you are infected with this malware you can use our removal guide. The link is provided below.
JohnWho
Mar 20 2007, 04:14 PM
Those nasty, uncrupulous spylockers!
Be careful out there.
Thanks for the heads up.
idk
Mar 21 2007, 05:40 AM
All of those rogue anti-spyware have the same interface which is stupid of the hackers who made them
rycherulz
Mar 27 2007, 11:42 AM
Hi Folks,
Newbie poster here! Quick question.
My buddy infected himself with what appears to be the SpyLocked malware. He's not a computer expert, but can make his away around with a little input here and there.
I did a search based on what he told me last night, and came up with the Virus Burst removal instructions on this site. I downloaded the SmitRem.exe file and the RogueScan_setup.exe file, along with the removal instructions, and sent them to him via e-mail.
I just saw this post, and realize that VirusBurst and SpyLocked appear to be two separate pieces of malware but in the same family.
Will the Virus Burst version of the removal tool, SmitRem.exe, remove the SpyLocked malware, or do I need specifically the SmitFraudFix.exe file from the SpyLocked directions? I'm trying to avoid having to download and print out these instructions if the Virus Burst instructions work just as well.
Grinler
Mar 27 2007, 11:54 AM
You should use the specific instructions for SpyLocked.
rycherulz
Mar 27 2007, 01:27 PM
QUOTE(Grinler @ Mar 27 2007, 12:54 PM)

You should use the specific instructions for SpyLocked.
Yep. My buddy called right after I posted saying the VirusBlast tool didn't work.
Ran the SpyLocked one, and as if by magic, the laptop has been healed. Imagine that, following directions actually works.
tjconfused
Mar 28 2007, 10:18 AM
I am new to this site and I have printed your instructions for removing Spylocked. I'll give it a try. Thanks for the positive outlook on what appears to me to be a confusing task.
megslc
Mar 29 2007, 10:16 PM
I got VirusBurst last Fall and it took a few weeks back and forth with Symantec, along with a few added $$, before they got me a fix which was from you. Then last Feb. I got Spydawn infection so I came straight here and got it removed in less than an hour. Now today I got the SpywareLocked and once again, your fix did the trick.

Thanks so much -- your Fix programs are awesome.

Now if I can just figure out why I keep getting these stupid bugs and why my VirusScan program doesn't pick up on this stuff.
simonsunny
Apr 14 2007, 07:43 AM
A big Thank you for all you good people out there. I got delivered from this problem. couldn't have done with out you. I am still a beginner and your site is a blessing.
bdog1963
Apr 15 2007, 06:32 PM
Thanx so much bleeping computer for the smitfraudfix info.

I was UNlocked in as matter of minutes. HIGHLY RECCOMMENDED !!!
Umbrella
Apr 17 2007, 01:32 AM
Thank you for telling us about this
SmitFraudIsWrong
Apr 17 2007, 03:10 PM
Cant download the SmitFraudFix...seems the link is broken
Grinler
Apr 17 2007, 03:22 PM
Follow the automated instructions here until it is back:
http://www.bleepingcomputer.com/forums/topic63896.html
firelight
Apr 18 2007, 03:19 PM
I just got infected with Spylocked and ActiveX Video today so I tried the automated SmitFraudFix method. At first, I thought the problem was solved - the icon in the taskbar disappeared, the toolbar that was installed with the spyware was also removed and I managed to get my homepage back, folders for both Spylocked and ActiveX Video that were in my Programme Files folder are gone, and when I open Add/Remove programmes on the control panel, I don't see either software in the list - so I can't see anything wrong.
But when I scan my computer with SpyHunter, it's still detecting the Zlob trojan in my registry. Now I'm not sure if I have a problem!

Can anyone please tell me what I should do about that? Many thanks.
Grinler
Apr 18 2007, 03:28 PM
It may be a harmless leftover entry.
Does it say what registry key it is seeing?
firelight
Apr 20 2007, 05:59 PM
Hi Grinler
Thanks for the quick response. Erm...registry keys are those things that start with e.g. HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE etc? If so, yes, that's what was listed. Since I don't have the full version of SpyHunter (too stingy!), I used it to scan my computer then used the registry editor to delete the relevant...thingies (registry keys, if that's what they're called)....

I then scanned the computer again, restarted, scanned again etc until it was all clear. So far, everything seems to be back to normal although a couple of times I've had a message popping up to say my minimum virtual memory is too low, which has never happened before. Other than that, nothing strange has happened.
Grinler
Apr 21 2007, 08:46 PM
Yes those are the entries. If you still are concerned by some leftovers, you should post a new topic in the Am I infected forum and people can help you there.
firelight
Apr 24 2007, 04:22 PM
Thanks for all your help, Grinler. Appreciate it.
spartan101
Apr 26 2007, 04:09 PM
Thank you soooo much for informing me about spylocked i thought it was a bogus spyware prog. but i did not know it would mess up my computer so much thank you again
Shasshermaster
Zombiewoof
May 21 2007, 07:10 PM
I tried the SmithFraudFix automated removal process....I now have my sanity (and computer) back.
Why the &*$%**() didn't MS Live OneCare block it or find it?
I ran the Live OneCare several times and it never found Spylocked.
THANKS
Grinler
May 22 2007, 10:22 AM
Unfortunately not all antivirus software is created equal. Many of the reviews on one care are not too favorable.
hereami
May 23 2007, 10:30 AM
Hi, boy am I glad i found this site!!! My boyfriends computer got hit with SpyLocked and with your help and the help of another software (which is free) I got it removed. Thank you Thank you.
Jammemaw61
May 25 2007, 10:38 AM

My hats off to you! I also got that spylocked locked on my computer. I came across this site and I stand up to applause you all.

It took less that 5 minutes to get it off after your help. Everyone I know will know about this website. You don't ask for anything in return. I will be donating to your causes. Thank You!
Bernard B
Jun 5 2007, 06:32 AM
I had Spylocked 4.1 on my Taskbar for 2 weeks. I tried everything to remove it. Norton said that they could talk me through removing it for about £70. I said no way considering that their system had let it through onto my computer somehow. Anyway with luck on my side I saw BleepingComputer.com recommended on a Microsoft Forum. and after registering downloaded the removal tool and followed the excellent instructions. and Wow! it worked. Thankyou BleepingComputer and Thankyou SmitfraudFix. For achieving what the more well know anti spyware expert systems could not do. Regards B.Barbur
dustydawna
Jun 6 2007, 07:22 AM
Thank you so much for this, I was at my wits end on how to get rid of that annoying flashing icon, this worked wonders, thank you for helping me with this.
Just one question: what do I do with the smitfraudfix icon on my desktop?, and it also added a smitfraudfix folder on my desktop, and I would like to know what I am supposed to do with that.
thanks,
dawn
Grinler
Jun 6 2007, 10:07 AM
You can delete those.
Jesse Bassett
Jun 6 2007, 04:13 PM
So how does one get SpyLocked? MY uncle had it on his PC and I used AdAware, Spybot, CCleaner, and AVG Antispyware to delete it. I just want to know how one gets it installed on their computer. Does it come through email?
Grinler
Jun 9 2007, 10:12 PM
It is typically disguised as a fake video or music codec that someone installs in order to watch a particular video.
chasrob
Jun 17 2007, 12:59 PM
I wish to apologise for sending a reply to a problem I should have read your terms that only yourselves should reply to questions I promise not to do it again

chasrob
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.