Home » Fake Antispyware » Spylocked

Spylocked Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 271
Category: Fake Antispyware

SpyLocked is rogue software that wants to lure your money out of you, by tricking you into buying the full version of the program. That is done by sending you numbers of fake security alert notifications and by performing a fake system scan. Both of the methods are used to convince you that your computer is seriously infected with various types of malware. SpyLocked is an especially dangerous infection, because if you remove it partially, it can easily re-install itself without your knowledge or consent.It would be great if SpyLocked could really detect all these threats that it reports to you about. However, the viruses in the rogue’s detection list most probably do not exist in your computer, because the names are randomly generated by SpyLocked itself. The creators of the rogue have designed and programmed this program in a way that it shows you the “threats”, but it does not allow you to remove them, because the trial version is for scanning only, and if the user wants to get rid of the viruses he has to purchase the full version of the program. Zlob Trojan is one of the most common ways for SpyLocked to get into your system. This Trojan is associated with a lot of rogue programs and it can easily download and install them onto your computer, because it does not need to prompt you about its actions. In fact, at first it might seem that you have acquired a useful program, because here is the statement about SpyLocked on the rogue’s information page, designed by cyber criminals:

“Every PC owner has valuable and confidential personal information stored on his/her computer. This can include credit card and banking details, private e-mails and documents, shopping and browsing habits, etc. All this information should be protected from software intruders snooping. Are you sure your PC is protected? Do you want to know whether it is infected or clean? Use SpyLocked scanner and check your PC now. In order to avoid detection, names of adware and spyware are often changed but their content remains the same. SpyLocked’s high quality spyware detection and removal engine finds even the most artful infections and removes them quickly and effectively.”

Unfortunately, none of that is true, and the longer SpyLocked stays in your computer, the slow your system becomes, and the harder it is to operate your machine. Get rid of the annoying pop-up messages and forceful browser redirections by removing SpyLocked for good. Get yourself a good antispyware application that will terminate the rogue for you and will protect your computer from similar infections. Automatic removal is always an option if you are not perfectly computer savvy. Just do not hesitate and do not allow SpyLocked to remain in your computer any longer.

Download Malware Scanner to detect Spylocked
Tested Spylocked removal solution for 64/32-bit Windows 7/Vista/XP/2000
*The Spyhunter scanner download on this site is intended to be used as a detection tool. If you want to use its a removal function, you will need to purchase the full version of SpyHunter.

Spylocked Screenshots:

Spylocked

Spylocked technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1SpyLocked 3.7 Website.lnk
2oyopu.dll7168 bytesMD5: 3d92aa1ce3971dfdf116dfcc63b48874
3SpyLocked 3.7.url
4Uninstall SpyLocked 3.3.lnk
5SpyLocked 3.2 Website.lnk
6Uninstall SpyLocked 3.5.lnk
7SpyLocked 3.6.url
8SpyLocked 4.0.url
9SpyLocked 3.6.lnk
10SpyLocked 3.6 Website.lnk
11SpyLocked.lnk
12qvjpt.dll7168 bytesMD5: fe745a84daa12fa4d0e586f0527b743a
13SpyLocked 3.1 Website.lnk
14SpyLocked 4.3
15afkvvy.dll8192 bytesMD5: e83e8af39e6612dc493332719031b338
16SpyLocked 4.0 Website.lnk
17SpyLocked 3.5.lnk
18SpyLocked 3.5 Website.lnk
19SpyLocked 3.7
20isadd.dll
21fyxkaah.dll7168 bytesMD5: f12bb0d083c9c71a28a1e5f52e0dc063
22isamntr.exe36864 bytesMD5: 6e9ff3c13c8967b1e243294fc55aea81
23SpyLocked 3.9.url
24SpyLocked 4.3.exe1875968 bytesMD5: 4a3e7751fe76f09e0484b49638fc79a3
25SpyLocked 3.1.lnk
26SpyLocked 3.4 Website.lnk
27Uninstall SpyLocked 3.9.lnk
28SpyLocked 4.3.url
29SpyLocked 4.2.exe1818624 bytesMD5: 33d4c454c7104d1d8b3a31279ce241f6
30SpyLocked 3.3 Website.lnk
31onwtj.dll7168 bytesMD5: 2695057d8a6922d673db9492c3b920c1
32SpyLocked.url
33SpyLocked 3.5.exe
34SpyLocked 4.1
35sl_setup[1].exe3519373 bytesMD5: 0146243694f976fdbe2b280703e3c810
36eeuydc.dll7168 bytesMD5: 6024eb36d13b2fe794359da1cc7cfcca
37SpyLocked 3.3
38xuoce.dll7168 bytesMD5: 48ac2afb0ff0f7dec1f1098f8e3af5c0
39SpyLocked 3.4.lnk
40SpyLocked 3.4.url
41SpyLocked.exe1900544 bytesMD5: 68c847e2031148ebc2712f9c3cdd2363
42pkgvyg.dll
43codecaddon1169[1].exe
44SpyLocked 4.0.exe2580480 bytesMD5: 664fd5742430f8bfb4482cfbbb807d71
45Uninstall SpyLocked 4.3.lnk
46avD.exe3360935 bytesMD5: 5ccc28eda710f518a578dab18986b171
47ygjun.dll7680 bytesMD5: 77422daeb163c29c8587552c4198bab6
48iesplg.dll
49SpyLocked 3.9 Website.lnk
50Uninstall SpyLocked 4.2.lnk
51sl.dat1396736 bytes
52SpyLocked 3.2.lnk
53SpyLocked 4.2.url
54kgkdbsk.dll
55dooep.dll
56%ProgramFiles%\SpyLocked 3.9
57zch29sr.dll10000 bytes
58%ProgramFiles%\SpyLocked 4.1
59Uninstall SpyLocked 4.0.lnk
60SpyLocked 3.5
61Uninstall SpyLocked 3.1.lnk
62SpyLocked 4.1 Website.lnk
63egzcpq.dll
64Uninstall SpyLocked 3.6.lnk
65dtjby.dll7168 bytesMD5: 0ff460a6ced96fdf0600c2acb8798db7
66SpyLocked 4.0.lnk
67SpyLocked 4.2 Website.lnk
68pkjcoxq.dll
69SpyLocked 3.3.lnk
70pmsnrr.exe33792 bytesMD5: 008af7fc2df1228958724a00aa0df080
71SpyLocked 4.3.lnk
72yronl.dll
73%UserProfile%\Start Menu\Programs\SpyLocked 4.3
74SpywareLocked.lnk
75SpyLocked 3.6
76SpyLocked 3.3.url
77SpyLocked 4.3 Website.lnk
78SpyLocked 3.9
79kbui32.dll91648 bytes
80rxqcpn.dll8704 bytesMD5: e933e827bc2f9cb3be6e71226e1d0478
81tahxqcj.dll7168 bytesMD5: c7837c26d06c5a11eeba5a433e81075e
82SpyLocked 4.1.lnk
83SpyLocked 4.0
84SpyLocked 3.4
85uimcu.dll
86%ProgramFiles%\SpyLocked 4.2
87Uninstall SpyLocked 3.4.lnk
88%ProgramFiles%\SpyLocked 3.7
89SpyLocked 3.7.exe2580480 bytesMD5: f98eb22410296ab2890794abfbc6e1bd
90SpyLocked 3.9.exe2580480 bytesMD5: 549cb01d2bf4fbfb1f818d0361fa40ac
91Uninstall SpyLocked 4.1.lnk
92SpyLocked 3.6.exe2580480 bytesMD5: 4fb5b76d194a76316059edb8672ce2f6
93%ProgramFiles%\SpyLocked 4.0
94rcohty.dll7168 bytesMD5: 6a06a538b8777ca55bb918f0dad98807
95SpyLocked 3.7.lnk
96SpyLocked 3.5.url
97%ProgramFiles%\SpyLocked 4.3
98SpyLocked 4.2.lnk
99SpyLocked 4.2
100SpyLocked 4.1.exe2580480 bytesMD5: b9d8bd317f59358a5f035f533857cd3f
101Uninstall SpyLocked 3.7.lnk
102pjgerka.dll8704 bytesMD5: 68867936b97f99172748d46670578a4b
103antzozc.dll
104Uninstall SpyLocked 3.2.lnk
105SpyLocked 3.9.lnk
106SpyLocked 4.1.url
107qzviz.dll
108pmmnt.exe10240 bytesMD5: 0452539c2b1a80d97ca113816a424a58

Files in the following directories were modified:

  • %ProgramFiles%
  • %UserProfile%\Start Menu\Programs

Memory Processes Created:

# Process Name Process Filename Main module size
1isamntr.exeisamntr.exe36864 bytes
2SpyLocked 4.3.exeSpyLocked 4.3.exe1875968 bytes
3SpyLocked 4.2.exeSpyLocked 4.2.exe1818624 bytes
4SpyLocked 3.5.exeSpyLocked 3.5.exe
5sl_setup[1].exesl_setup[1].exe3519373 bytes
6SpyLocked.exeSpyLocked.exe1900544 bytes
7codecaddon1169[1].execodecaddon1169[1].exe
8SpyLocked 4.0.exeSpyLocked 4.0.exe2580480 bytes
9avD.exeavD.exe3360935 bytes
10pmsnrr.exepmsnrr.exe33792 bytes
11SpyLocked 3.7.exeSpyLocked 3.7.exe2580480 bytes
12SpyLocked 3.9.exeSpyLocked 3.9.exe2580480 bytes
13SpyLocked 3.6.exeSpyLocked 3.6.exe2580480 bytes
14SpyLocked 4.1.exeSpyLocked 4.1.exe2580480 bytes
15pmmnt.exepmmnt.exe10240 bytes

Registry Modifications:

The following Registry Keys were created:

  • SpyLocked 4.2
  • 6EBB57F2-B416-4F76-9384-A8F669FF60E4
  • 06BA73BA-1604-446B-A6EB-CDCCA7456C3F
  • SpyLocked 3.9
  • SpyLocked 3.7.exe
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{9d6fac42-a7be-4702-87ef-75d8dc14249e}"
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 3.9.exe
  • 54D2D4FC-914C-432C-B638-599F48D77A08
  • A45C94F8-E114-48EB-84C9-DE1B871E1A3A
  • 099A05C2-CDA0-41FF-9A38-DD8B6149A766
  • D9F4D801-2431-465A-B754-AB9E3B649E8C
  • 27491041-2CCB-4A37-9297-FB84134ECAD4
  • 27B1DED9-7493-4204-AFCE-9AFD4B7FC662
  • 1D3F4979-14F0-4344-95F9-D019C75ED669
  • 062BC936-7CE4-421C-944E-BD388EC91C86
  • A05808F4-0101-4439-969B-F5D233E8EE49
  • 8D0C82AC-4396-4176-8827-87F214892486
  • 17A868CD-C8B9-4A46-8224-85E4D81CD764
  • D8CD0D4F-47B6-4499-AF5A-48446972E058
  • 8AFC508B-6B96-479C-A1AC-848EB3F4EFDE
  • SpyLocked 4.3
  • CFE803F1-58E8-41AC-B438-DE4E86C6BA43
  • 11446069-71A7-4DFC-9D33-3A6AAD1F7B6F
  • SpyLocked 4.0
  • 390A9AAF-A0F9-4A31-80AE-7D7A2C723FF4
  • 87EA76C9-411E-44D0-8270-EA2DF3941133
  • 99EAEF8C-652D-407C-8319-781A2BB30FF7
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {9F143C3A-1457-6CCA-03A7-7AA23B61E40F}
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {df8c3aed-b58e-4bcb-96b3-aa1b7bbdbbd4}
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {07a582e8-bae3-457d-9d29-2048de45a369}
  • FAB32069-CD8D-4750-922B-44CF5B95CCA5
  • 05436423-E2DA-4307-AEE4-275C2522D4DD
  • E4703CF2-7F82-4AD7-B317-8EC1CBC9B619
  • SpyLocked 4.1
  • CE351B84-F0D6-4FA0-AAD7-3C0616EA647E
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{07a582e8-bae3-457d-9d29-2048de45a369}"
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 3.6.exe
  • D64DCDAE-38CD-488C-A85C-00A0B5C03AE8
  • D237BD03-5808-4B64-942D-6746FE50EE66
  • ceca6f2b-247b-4ece-9b7a-d0135c8036fc
  • DCD7446E-821A-424A-B3B7-0A1B71423909
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{ceca6f2b-247b-4ece-9b7a-d0135c8036fc}"
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8D5849C4-93F3-429D-FF34-260A2068897C
  • F5D23930-23C6-440E-AB55-D019E1171539
  • 1DEAC6D1-27B1-4804-8309-86F80E64D91F
  • 4D31CCA1-C42B-4796-851F-CA8ED4CD2A7E
  • 2F223FDC-164A-492C-82D0-055FD8CE349C
  • CBC3689B-55CD-410E-8B7A-49931D2B465B
  • 3037B797-A390-4DCD-BCA6-272815FC4265
  • SpyLocked 4.0.exe
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 4.1.exe
  • B48F25A0-49A8-46AE-B506-A789F8E91A51
  • E6BC961E-2230-4A37-B7DC-F311773C7DBE
  • df8c3aed-b58e-4bcb-96b3-aa1b7bbdbbd4
  • 60DDD776-BD47-421A-9B75-C5965C1AAEB3
  • E0DBB136-FCD7-4180-9207-D4A9E822002E
  • B3D80493-3013-4E93-A878-4CEFC401F4A6
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\df8c3aed-b58e-4bcb-96b3-aa1b7bbdbbd4
  • 764CE36A-C778-42A8-B3B2-4B09A4B10469
  • EA802EA0-2F4D-498D-816B-E828718CC3F7
  • 4470C18E-1EF2-453C-BEC1-1745D781BCAB
  • C5BF4465-5322-462F-B41F-459F649F3996
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {bd0fc212-0a36-4232-83cc-2063fb9282e0}
  • EDE2A2B4-B1CB-4BF8-93D1-154E49284A71
  • SpyLocked 3.9.exe
  • 9F143C3A-1457-6CCA-03A7-7AA23B61E40F
  • 2DA226F0-FE43-4F80-A94A-1848039DE0DD
  • EAE9695A-B942-4C07-B94F-7CFBE3F35A37
  • DE8854B5-22C0-40AD-8069-5BB684EBAB46
  • 3BF6C840-4D12-4FB5-88A2-E2BC03461DC2
  • SpyLocked 3.7
  • SpyLocked 4.1.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\SpyLocked 3.6
  • 2C5B5226-045D-4A46-B4FC-228B0891FEEC
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\bd0fc212-0a36-4232-83cc-2063fb9282e0
  • 314120E4-5A05-492C-9BF2-22558CF0F202
  • 0B847A1A-A872-95FC-8E22-F8B4AE044657
  • 50450F27-B90B-422B-A4C9-5EC5A5B78001
  • F8681E4A-3B1B-46C5-9A0E-E4BDCD240A92
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\SpyLocked 4.1
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\9F143C3A-1457-6CCA-03A7-7AA23B61E40F
  • 464B2A01-EB39-4CF6-B6BB-6262776B79DA
  • SpyLocked.exe
  • 07a582e8-bae3-457d-9d29-2048de45a369
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked.exe
  • D3F81C5A-3A2D-464C-B617-289495AE52DD
  • 9309BDC4-952B-4146-8303-2FDA3F5B218F
  • 5BA3EE9B-A96E-4301-B839-388AFEFCD9F4
  • F71472A0-B888-4743-8207-2DA73363EF99
  • 861ADDA2-0216-49AC-AA5B-62F64F1D91D1
  • 22489F95-AA2E-4DFE-A00C-4F5D0DFDAFD6
  • 6AFB5B8E-ACFD-4489-91B3-DAA1388A31EC
  • 65DBC5F7-AA53-49C9-B5A5-AB2E63F17A04
  • BDC7BB72-6C19-415D-86C3-76CC46EC00A9
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\9d6fac42-a7be-4702-87ef-75d8dc14249e
  • 8262777C-7176-4A9C-A8A6-D0C4AEB467B6
  • B3250C2D-C398-4EC9-8A79-85BCF65F6608
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{8D5849C4-93F3-429D-FF34-260A2068897C}"
  • 273582F0-3C1E-4BFC-B2A4-8348AE47F717
  • DEB82BF1-47BB-4863-B85C-77363D3C37D5
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\07a582e8-bae3-457d-9d29-2048de45a369
  • 94792C8E-6FE0-462C-9D20-AD560608DDA1
  • SpyLocked 4.3.exe
  • 41E4ADCD-CCC2-4DA0-97C3-83051A4C35F1
  • AD2AA1CD-22FF-4562-A616-1C64A42985BB
  • 9A9E938C-4A18-4B36-A973-DADCD8A1C268
  • 43DF1CEE-70B3-4E2D-A740-4AC468786207
  • B151B421-A97B-4C1D-B555-EED8A35BA5C8
  • 815B01A0-BF97-41E9-ACF2-32B76F98A960
  • 3A7A14FD-7FEC-48CF-A06F-210344DE6E75
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\ceca6f2b-247b-4ece-9b7a-d0135c8036fc
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 4.0.exe
  • 1DAD1143-2B5C-43B9-BF46-806E3002DA80
  • 6F342C0C-EF49-49E2-B3F1-FE28F193B974
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{bd0fc212-0a36-4232-83cc-2063fb9282e0}"
  • 85292BEE-65FF-41AD-8E72-B385D1C93C89
  • E9817993-83FF-4343-B14E-6CDFB378B21D
  • 9F99FD1A-5C53-4B82-981A-92A0F587D59B
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {ceca6f2b-247b-4ece-9b7a-d0135c8036fc}
  • C2D197C9-8570-4AC8-A121-92F9A8CCD857
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 4.3.exe
  • F198A883-6BCF-4B94-A890-D8ED007FBCF7
  • FA08D9EC-0C7B-4C37-8D7A-E7837B997E90
  • FC51DED7-D056-45E5-A4FF-A308E2DECFA5
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {8D5849C4-93F3-429D-FF34-260A2068897C}
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 3.7.exe
  • 6F61B413-1DFE-4C4C-8CD4-B97BE0B17504
  • SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 3.6.exe
  • SpyLocked
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{9F143C3A-1457-6CCA-03A7-7AA23B61E40F}"
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler "{df8c3aed-b58e-4bcb-96b3-aa1b7bbdbbd4}"
  • 9d6fac42-a7be-4702-87ef-75d8dc14249e
  • 52BF24CF-8378-42B4-8962-135CFB6C4F77
  • 8D3014AE-0854-4222-A733-D9DD0149D9FA
  • 1ABA72AA-8BD4-4DCC-BDD9-4365B805C152
  • 8B7E3C69-4A2E-4F48-B690-47BEEEF16FF5
  • SpyLocked 3.6
  • 22F1A770-B823-48D4-8693-B953902A06EF
  • B2C4933E-5F9B-45BB-BA48-E50007CBF91D
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {9d6fac42-a7be-4702-87ef-75d8dc14249e}
  • 6C2AD1F2-670F-4096-9CF5-6FBEA48D2E38
  • SpyLocked 4.2.exe
  • A392D107-AFBF-4E1B-8092-DB508BC890A5
  • 9C4D0D3F-F36E-42A3-9B35-A43C08AB1866
  • 0779F905-37B1-43BC-BAB7-A10406FA8C01
  • 21EE18CF-E24C-4AD8-A279-C34EEB5F18A9
  • 392D4A36-6ADF-4A99-A820-3014A53E62E3
  • 630CBF61-54CC-4AC3-97B0-D4071345807C
  • ABD41A08-5C4D-4CDB-8310-A681E73755BF
  • 4D3BC08F-3C13-4CD1-80F4-F5A7B7D0388F
  • 42F16135-D0A4-43A2-990C-27FCABD9C19F
  • 5CA1A9F6-10F8-4008-B884-755B25B6848A
  • 8D5849C4-93F3-429D-FF34-260A2068897C
  • CBCCB1D8-AB10-4B4C-9982-A8DEA99F3111
  • 680FA31F-43BC-47DA-9405-A0D1B1C1151B
  • Microsoft\Windows\CurrentVersion\App Paths\SpyLocked 4.2.exe

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *