Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Datalock


Aliases:


Datalock

Malware
Virus
W32

Summary

The virus contains one text string: "DataLock version 1.00". It infects all EXE files, but COM files are only infected if they are larger than 22999 bytes.

In addition to infecting files, the virus carries a non-destructive, but highly annoying payload. When a file is opened with function 3DH, the virus checks if the filename matches "*.?BF", which is in all likelihood intended to match .DBF files (dBASE data files). If the name matches, the virus produces a "Too many files open" error message, making the file inaccessible.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details


Variant:Datalock-1043

A bigger, "buggy" version.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.