SpyLocked, the latest rogue!
Which looks alot like VirusBurst(ers) and recent rogue, SpyDawn. Only they styled it the same blue as this rocking site! Ok enough of me boasting. Serious stuff here.
I never really tell you how these get installed or where they come from whilst surfing the internet. Mainly because we have all seen it before and generally know. But for the new readers applications like this get installed on a system by the Trojan.Zlob from fake codecs to view video files.
Then once you view these files with the codecs you will be asked to install these rogues then once installed it’s found x, y and z on your system. Only to lure you in to pay for the program which in affect is a scam.
(Clich to Enlarge)
This rogue, like many others generally look the same. The licence agreement or known as EULA contain the most mistakes as they sometimes show previous rogues mentioned rather than the rogue it is installing. And the web-sites for these also generate many mistakes.
This rogue is associated with the infamous Inhoster as the whois shows:
Registration Service Provided By: ERDOMAIN.COM
Contact: +49.1797458539
Website: http://www.erdomain.comDomain Name: SPYLOCKED.COM
Registrant:
Privacyprotect.org
Domain Admin (contact@privacyprotect.org)
PO Box 83-000
Johnsonville
Wellington
null,6440
NZ
Tel. +45.36946676Creation Date: 19-Feb-2007
Expiration Date: 19-Feb-2008Domain servers in listed order:
ns3.wildgadgets.biz
ns2.wildgadgets.biz
ns1.wildgadgets.biz
If you come across this rogue, avoid installing it. If you have became affected by fake codecs and installed this one then visit our SpyLocked Removal Guide or get step by step assistance from a qualified helper here. Discuss it in more here.
Update; The removal guide has been updated to include the new names for this rogue and versions. SpywareLocked 3.1 3.4 & 3.5 all get removed by our guide.
they never get bored do they its a never ending stream of Progs from the same group makes you sick
It’s their “job”. They work very hard keeping ahead of those of us who chase after them.
The chase is in good condition as you may notice soon.
Well, I just got owned by this. Funny thing to note about it is it will not allow you to go download.com. I installed AdAware which did not fix the problem, then TrojanRemover, which did.
To me, the giveaway that the virus “protection” wasn’t really protection is that the toolbar it installs on your browser cannot be disabled.
Glad you got it removed. Feel free to get a check up if you feel one is needed. All our help is free. May aswell make good use of it.
Andy
I recently got hit by something similar to this, when I tried to install these “fake codecs” to view a video file…However, it didn’t install SpyLocked, but there is a small icon in my system tray then wehn clicked on brings me to the SpyLocked website…anyone know what I can do do get this off my system?
Hi JP,
It could simply be some files that need clearing. Step into our forum and post for help here:
http://forum.securitycadets.com/index.php?showforum=2
Registering is free and the help is also free. We will advise you about your problem and get rid of it.
However you could also use our self help guide for spylocked:
http://forum.securitycadets.com/index.php?showtopic=2062
If you didn’t install the program in question. Just ignore the add/remove part of the guide. Either way we will be here for any additional support.
Andy
Can we sue these misfits.. what about the credit card company? I called and told them i have them on the list for a lawsuit if they would not give me the contact info for spylocked and they hung up.. If we can not get the coders lets get in their paths and maybe the cc companys will refuse to support those supporting coders..
(ö¿ô) just my 2 bits
There would be no point sueing a organisation who will just continue to do this. However you can complain about this on a malware complaints forum:
http://www.malwarecomplaints.info/viewforum.php?f=2
There are forums that apply to your nationality or language and also a topic for spylocked. I would recommend posting there about your exeriences.
You guys Rule, that’s a fact! The nasty little begger got into my laptop again after comply re-formatting and re-installing the OS within a weeks time and had prevoked the less favorable portions of my vocabulary in the process.
Your process for defeating the infection was actually thurough, simple and easy to follow. Absolutely outstanding job!!!! I.O.U. BIG TIME
Glad we could be of help. Please feel free to check our forums for advice on what programs to use to futher protect yourself. I say that because you mentioned you reinstalled.
You can also add any feedback here:
http://forum.securitycadets.com/index.php?showforum=29
I got hit with this spylocked.com website saying I was infected with Trojan Downloader:win32/zlob and it kept popping even thought nothing was being detected by Zone Alarm. I downloaded Windows Defender and it didn’t remove the warning on the toolbar which looked like a windows security warning. When I clicked on that it took me to the splylocked.com website. I didn’t purchase the product. I was able to remove the trojans by downloading a trial copy of Trojan Remover 6.5.9 So far so good!
Last night my laptop got spylocked, accidentally while i tried to play video.I’d tried to run full scan of my antivirus/antyspyware Norton Internet Security, Windows Defender, Ad-Aware SE, and other major security antivirus free scan online, but useless. My System restore also shutdown. Removing manually nearly imposible. Thanks god, few hours ago i found “smithfreudfix”. It get rid ‘em all.
I just wanted to Thank You for the assist with the Spylocked program and for your taking the time to write out the complete step by step instructions on how to remove this. I have been working on it for over 12 hours and have spoken to 3 spyware program companies and no one knew exactly how to solve the challenge. Your step by steps had it resolved in about 30+/- minutes. Thanks again. Doc
About to go try this out myself. I reeeeeally hope it works because those pop-ups are a nuisance and that system tray icon is causing me to rip out my hair… will post back in a few minutes :)
Thank you for your help. I just used your tutorial to successfully remove the popup from the system tray.
Minhhanh
one thing is that these companies will continue to release these programs as long as vunerable people keep handing them money for a program which dosnt do waht it says (or if it does it does it very porly) atleas estdomains have beentaken down that should stop some of them ( untill they find another rogue host that is!)