Summary
Trojan:HTML/Browlock is ransomware that prevents users from accessing the infected machine's Desktop; it then demands payment, supposedly for either possession of illegal material or usage of illegal software.
Disinfection & Removal
Automatic Disinfection
Allow F-Secure Anti-Virus to disinfect the relevant files.
More
For more information, see Removing 'Police-themed' Ransomware.
For more general information on disinfection, please see Removal Instructions.
Technical Details
Trojan:HTML/Browlock has been reported to target users in multiple countries, including the United States, the United Kingdom and Canada. Typically, it will display a 'lock screen' purportedly from a local or federal law enforcement authority, claiming that the machine has been locked and encrypted due to 'illegal activities'. A 'fine' is then demanded to restore the system.
This malware was also covered in our Labs Weblog blogpost:
A lock screen used by one Browlock variant is shown below:
Submit a sample
Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)
F-Secure Community
Give advice. Get advice. Share the knowledge on our free discussion forum.