A new piece of malware called SpyLocked is hitting PC users.

SpyLocked is a fake spyware program that basically lies to users that their PC is infected by malware and it encourages users to buy the full version.  SpyLocked is spread by malware (Trojans and fake codecs especially). 

How do you know that you have SpyLocked installed?

The main giveaway (apart from seeing a program called SpyLocked running on your system) is the balloon message that's displayed:

System alert!
System has detected a number of active spyware applications that may impact the performance of your computer.Click the icon to get rid of unwanted spyware by downloading an up-to-date antispyware solution.

Want a quick, low-cost and guaranteed way to remove SpyLocked and protect yourself against future spyware?  Click here to download a copy of Spyware Doctor . SPECIAL OFFER!!! For 10% discount (Hurry! Offer limited to first 5,000 customers!) enter coupon code PCD-0WRG. Within minutes your PC will be free of SpyLocked, and any other malware that might be hiding on it, and it will be protected against future infections.

Removing SpyLocked

To remove SpyLocked you need a tool called SmitFraudFix .  Download this to your desktop before we begin the removal process.  You also need a tool that can open Zip files.  Windows XP can do this for you automatically or you can download 7-Zip   (a free compression utility).

1. Extract the files out of SmitfraudFix.zip.
2. After extractions you should find a folder on your desktop that contains 11 files.
   
3. Reboot your PC into Safe Mode.
4. Once the PC has rebooted open the SmitfraudFix folder on your desktop and double-click on SmitfraudFix.cmd.
   
5. Press any key to continue.
   
6. You'll now be faced with 6 options:
   
   Press 2 to start Clean (safe mode recommended) followed by ENTER.
   
7. If you are running Windows XP you'll see the Disk Cleanup start up and clean out your temp files and Temporary Internet Files folder.
8. When asked if you want to clean the registry, press Y followed by ENTER.
   
9. Check for the following files:
   C:\WINDOWS\system32\fyxkaah.dll
   C:\WINDOWS\system32\onwtj.dll
   If you find these, delete them.
10. Check for and delete if present the following files:
    C:\Program Files\SpyLocked\spylocked.exe
    C:\Program Files\SpyLocked\sd.ini
11. Check for and delete if present the following folder:
    C:\Program Files\SpyLocked
12. Reboot your PC.

Your PC should now be free of SpyLocked.

 After this kind of infection it's also a good idea to downloads and install an effective antivirus program (such as Kaspersky Anti-Virus 6.0 ).  To get a massive 15% off Kaspersky Anti-Virus 6.0 buy it using the link above and when prompted use this coupon code: DOC-IJJE

 Alternatively, if you want a quick, simple and automatic way to remove SpyLocked, get a copy of Spyware Doctor  (trial here ).  SPECIAL OFFER FOR PC DOC READERS!!!  For 10% discount (Hurry! Offer limited to first 5,000 customers!) enter coupon code PCD-0WRG.

Spyware Doctor  has consistently been awarded Editors' Choice, by leading PC magazines and testing laboratories around the world, including United States,  United Kingdom, Sweden, Germany and Australia. All current versions of Spyware Doctor have won Editors' Choice awards from PC Magazine in United States.

This entry was posted by the PC Doctor on Wednesday, March 21st, 2007 at 13:14 and is filed under Stay Secure. Responses are currently closed, but you can trackback from your own site.