Threat Description

Trojan:​HTML/Browlock

Details

Aliases: Trojan:​HTML/Browlock.[variant]
Category: Malware
Type: Trojan
Platform: HTML

Summary



Trojan:HTML/Browlock is ransomware that prevents users from accessing the infected machine's Desktop; it then demands payment, supposedly for either possession of illegal material or usage of illegal software.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

More

For more information, see Removing 'Police-themed' Ransomware.

For more general information on disinfection, please see Removal Instructions.



Technical Details



Trojan:HTML/Browlock has been reported to target users in multiple countries, including the United States, the United Kingdom and Canada. Typically, it will display a 'lock screen' purportedly from a local or federal law enforcement authority, claiming that the machine has been locked and encrypted due to 'illegal activities'. A 'fine' is then demanded to restore the system.

This malware was also covered in our Labs Weblog blogpost:

A lock screen used by one Browlock variant is shown below:






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

F-Secure Community

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More