Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Trojan:HTML/Browlock


Aliases:


Trojan:HTML/Browlock.[variant]

Malware
Trojan
HTML

Summary

Trojan:HTML/Browlock is ransomware that prevents users from accessing the infected machine's Desktop; it then demands payment, supposedly for either possession of illegal material or usage of illegal software.



Disinfection & Removal


Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.


More

For more information, see Removing 'Police-themed' Ransomware.

For more general information on disinfection, please see Removal Instructions.



Technical Details

Trojan:HTML/Browlock has been reported to target users in multiple countries, including the United States, the United Kingdom and Canada. Typically, it will display a 'lock screen' purportedly from a local or federal law enforcement authority, claiming that the machine has been locked and encrypted due to 'illegal activities'. A 'fine' is then demanded to restore the system.

This malware was also covered in our Labs Weblog blogpost:

A lock screen used by one Browlock variant is shown below:







Submit a sample


Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

F-Secure Community




Give advice. Get advice. Share the knowledge on our free discussion forum.