spylocked?

Question

Ok i have a icon in my system tray and it looks like a dell help type icon. It's a blue circle that has a white question mark in the middle and it keeps blinking. The icon that it is blinking to is a red circle with a slash through the circle and when I click it (right or left click) it brings up a website called SpyLocked and it's tying to get me to download spylocked which what the website says is a anti-spywear program and some reason I'm thinking it's a bad site. I looked through my add/remove programs trying to find anything that's not supposed to be there but i can't really find anything. I've ran Ad-Aware SE and Windows Live One Care and cleaned everything they found and it's still there. Some help please   The website it's bringing me to is http://www.spylocked.com/?aff=321

ky331 · Answer

SpyLocked is a SmitFraud variant. Both RogueRemover as well as SuperAntiSpyware claim they can remove SpyLocked. If you wish, you could try these (links below)... be advised that a complete SuperAntiSpyware scan can run 20 to 40 minutes. Be sure to let us know which one, if either, worked for you.

Rogue Remover http://www.malwarebytes.org/rogueremover.php

SuperAntiSpyware http://www.superantispyware.com/

====================================================

If these attempts don't succeed --- or even if they do, but you'd like further confirmation that you're fully clean, then you can post a HiJackThis log in the HJT forum, where the helpers can offer you personalized assistance --- please do NOT try to proceed with HJT "fixes" on your own!

Here's the information on HiJackThis, in case you decide to pursue it:

Download a self-extracting copy of the latest version of HJT (HiJackThis) (version 1.99.1) from

http://downloads.malwareremoval.com/hijackthis_sfx.exe

Save it to your Desktop.

Double-click on the file hijackthis_sfx.exe file, and allow it to self-extract [by clicking on UnZip] into the suggested/default folder,

C:\Program Files\HijackThis

Use Windows Explorer to navigate your way into this folder, and then double click on HiJackThis. exe

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.

Justinu1989 · Answer

Thanks so much the first link removed it :smileyhappy:

ky331 · Answer

glad to have been of help.   Like I said, HiJackThis can serve as an additional confirmation, as sometimes, when you get infected, there's more 'hidden' stuff lurking around.   But that's your choice now.

CellPhone · Answer

Hi there, SpyLocked, which recently changed its name to SpywareLocked, is the latest in a series of fake anti-spyware, or rogue anti-spyware, programs..These programs are being distributed through sites hosting Zlob Trojans, which are malware that disguises themselves as a video or audio codec that you need to download and install in order to use a particular video or audio file. In reality, though, when you install these Trojans, they will instead show fake security alerts and install the SpyLocked or SpywareLocked program on to your computer: Well, manual removal is lil bit tricky, but worth a try, if automated removal doesnt work: Check this link: http://www.bleepingcomputer.com/forums/topic85376.html   Includes removal methods. Lemme know if it worked.

Bugbatter · Answer

QUOTE: 'Thanks so much the first link removed it'

Virus & Spyware

Was this post helpful?