Help - Search - Members - Calendar
Full Version: Spylocked Fails To Lock
BleepingComputer.com > General Topics > News
   
Grinler
A new rogue anti-spyware program has been released as of tonight called SpyLocked.

This program is part of the family of other Zlob installed programs such as SpyDawn, SpywareQuake, and VirusBurst to name a few. When run these programs display fake and exaggerated infection results used to scare you into purchasing the commercial version of their software. Under no circumstances should you purchase this software.

These programs are typically installed via the Zlob Trojan which masquerades as a fake audio or video codec. The Zlob Trojan is considered one of the most wide spread malware types so please be careful when downloading and installing new codecs. If you are unsure of what you are downloading, you can always ask us in the forum. A picture of the SpyLocked program can be found below.





If you are infected with this malware you can use our removal guide. The link is provided below.

JohnWho
Those nasty, uncrupulous spylockers!

Be careful out there.











Thanks for the heads up.

thumbup2.gif
idk
All of those rogue anti-spyware have the same interface which is stupid of the hackers who made them w00t.gif
rycherulz
Hi Folks,

Newbie poster here! Quick question.

My buddy infected himself with what appears to be the SpyLocked malware. He's not a computer expert, but can make his away around with a little input here and there.

I did a search based on what he told me last night, and came up with the Virus Burst removal instructions on this site. I downloaded the SmitRem.exe file and the RogueScan_setup.exe file, along with the removal instructions, and sent them to him via e-mail.

I just saw this post, and realize that VirusBurst and SpyLocked appear to be two separate pieces of malware but in the same family.

Will the Virus Burst version of the removal tool, SmitRem.exe, remove the SpyLocked malware, or do I need specifically the SmitFraudFix.exe file from the SpyLocked directions? I'm trying to avoid having to download and print out these instructions if the Virus Burst instructions work just as well.
Grinler
You should use the specific instructions for SpyLocked.
rycherulz
QUOTE(Grinler @ Mar 27 2007, 12:54 PM) *
You should use the specific instructions for SpyLocked.


Yep. My buddy called right after I posted saying the VirusBlast tool didn't work.

Ran the SpyLocked one, and as if by magic, the laptop has been healed. Imagine that, following directions actually works. w00t.gif
tjconfused
I am new to this site and I have printed your instructions for removing Spylocked. I'll give it a try. Thanks for the positive outlook on what appears to me to be a confusing task.
megslc
I got VirusBurst last Fall and it took a few weeks back and forth with Symantec, along with a few added $$, before they got me a fix which was from you. Then last Feb. I got Spydawn infection so I came straight here and got it removed in less than an hour. Now today I got the SpywareLocked and once again, your fix did the trick. thumbup.gif Thanks so much -- your Fix programs are awesome. clapping.gif Now if I can just figure out why I keep getting these stupid bugs and why my VirusScan program doesn't pick up on this stuff. wacko.gif
simonsunny
A big Thank you for all you good people out there. I got delivered from this problem. couldn't have done with out you. I am still a beginner and your site is a blessing.
bdog1963
Thanx so much bleeping computer for the smitfraudfix info. thumbup.gif thumbup.gif I was UNlocked in as matter of minutes. HIGHLY RECCOMMENDED !!!
Umbrella
Thank you for telling us about this smile.gif
SmitFraudIsWrong
Cant download the SmitFraudFix...seems the link is broken sad.gif mad.gif
Grinler
Follow the automated instructions here until it is back:

http://www.bleepingcomputer.com/forums/topic63896.html
firelight
I just got infected with Spylocked and ActiveX Video today so I tried the automated SmitFraudFix method. At first, I thought the problem was solved - the icon in the taskbar disappeared, the toolbar that was installed with the spyware was also removed and I managed to get my homepage back, folders for both Spylocked and ActiveX Video that were in my Programme Files folder are gone, and when I open Add/Remove programmes on the control panel, I don't see either software in the list - so I can't see anything wrong.

But when I scan my computer with SpyHunter, it's still detecting the Zlob trojan in my registry. Now I'm not sure if I have a problem! huh.gif Can anyone please tell me what I should do about that? Many thanks.
Grinler
It may be a harmless leftover entry.

Does it say what registry key it is seeing?
firelight
Hi Grinler
Thanks for the quick response. Erm...registry keys are those things that start with e.g. HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE etc? If so, yes, that's what was listed. Since I don't have the full version of SpyHunter (too stingy!), I used it to scan my computer then used the registry editor to delete the relevant...thingies (registry keys, if that's what they're called).... wacko.gif I then scanned the computer again, restarted, scanned again etc until it was all clear. So far, everything seems to be back to normal although a couple of times I've had a message popping up to say my minimum virtual memory is too low, which has never happened before. Other than that, nothing strange has happened.
Grinler
Yes those are the entries. If you still are concerned by some leftovers, you should post a new topic in the Am I infected forum and people can help you there.
firelight
Thanks for all your help, Grinler. Appreciate it.
spartan101
Thank you soooo much for informing me about spylocked i thought it was a bogus spyware prog. but i did not know it would mess up my computer so much thank you again

Shasshermaster
Zombiewoof
I tried the SmithFraudFix automated removal process....I now have my sanity (and computer) back.

Why the &*$%**() didn't MS Live OneCare block it or find it?

I ran the Live OneCare several times and it never found Spylocked.


THANKS
Grinler
Unfortunately not all antivirus software is created equal. Many of the reviews on one care are not too favorable.
hereami
Hi, boy am I glad i found this site!!! My boyfriends computer got hit with SpyLocked and with your help and the help of another software (which is free) I got it removed. Thank you Thank you.
Jammemaw61
clapping.gif My hats off to you! I also got that spylocked locked on my computer. I came across this site and I stand up to applause you all. clapping.gif clapping.gif It took less that 5 minutes to get it off after your help. Everyone I know will know about this website. You don't ask for anything in return. I will be donating to your causes. Thank You!
Bernard B
I had Spylocked 4.1 on my Taskbar for 2 weeks. I tried everything to remove it. Norton said that they could talk me through removing it for about £70. I said no way considering that their system had let it through onto my computer somehow. Anyway with luck on my side I saw BleepingComputer.com recommended on a Microsoft Forum. and after registering downloaded the removal tool and followed the excellent instructions. and Wow! it worked. Thankyou BleepingComputer and Thankyou SmitfraudFix. For achieving what the more well know anti spyware expert systems could not do. Regards B.Barbur
dustydawna
Thank you so much for this, I was at my wits end on how to get rid of that annoying flashing icon, this worked wonders, thank you for helping me with this.

Just one question: what do I do with the smitfraudfix icon on my desktop?, and it also added a smitfraudfix folder on my desktop, and I would like to know what I am supposed to do with that.

thanks,
dawn
Grinler
You can delete those.
Jesse Bassett
So how does one get SpyLocked? MY uncle had it on his PC and I used AdAware, Spybot, CCleaner, and AVG Antispyware to delete it. I just want to know how one gets it installed on their computer. Does it come through email?
Grinler
It is typically disguised as a fake video or music codec that someone installs in order to watch a particular video.
chasrob
I wish to apologise for sending a reply to a problem I should have read your terms that only yourselves should reply to questions I promise not to do it again whistling.gif chasrob
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.