Win32/LockScreen.AKP

What is Win32/LockScreen.AKP infection?

In this post you will find about the meaning of Win32/LockScreen.AKP and also its adverse influence on your computer system. Such ransomware are a form of malware that is clarified by online scams to demand paying the ransom by a victim.

In the majority of the instances, Win32/LockScreen.AKP virus will certainly instruct its targets to launch funds transfer for the objective of counteracting the modifications that the Trojan infection has actually introduced to the victim’s gadget.

Win32/LockScreen.AKP Summary

These modifications can be as complies with:

  • A process attempted to delay the analysis task.;
  • The executable is compressed using UPX;
  • Installs itself for autorun at Windows startup;
  • Network activity detected but not expressed in API logs;
  • Creates a copy of itself;
  • Uses suspicious command line tools or Windows utilities;
  • Ciphering the documents found on the sufferer’s disk drive — so the sufferer can no longer use the data;
  • Preventing normal accessibility to the sufferer’s workstation;

Related domains:

z.whorecord.xyz Gen:Variant.Ransom.176
a.tomx.xyz Gen:Variant.Ransom.176

Win32/LockScreen.AKP

The most regular networks whereby Win32/LockScreen.AKP Trojans are infused are:

  • By methods of phishing emails;
  • As a consequence of customer winding up on a source that holds a harmful software program;

As quickly as the Trojan is efficiently injected, it will either cipher the information on the target’s PC or stop the device from functioning in a proper fashion – while likewise placing a ransom money note that states the demand for the victims to effect the payment for the function of decrypting the records or recovering the data system back to the preliminary problem. In the majority of circumstances, the ransom note will come up when the client reboots the PC after the system has already been damaged.

Win32/LockScreen.AKP distribution networks.

In various edges of the world, Win32/LockScreen.AKP expands by leaps and also bounds. Nevertheless, the ransom notes and tricks of obtaining the ransom money amount may vary relying on certain neighborhood (local) settings. The ransom money notes as well as techniques of obtaining the ransom quantity might vary depending on particular neighborhood (regional) setups.

Ransomware injection

As an example:

    Faulty signals concerning unlicensed software.

    In particular locations, the Trojans often wrongfully report having actually found some unlicensed applications made it possible for on the sufferer’s gadget. The alert after that demands the customer to pay the ransom money.

    Faulty declarations concerning illegal web content.

    In countries where software application piracy is much less popular, this method is not as effective for the cyber frauds. Alternatively, the Win32/LockScreen.AKP popup alert may incorrectly claim to be originating from a law enforcement organization and will certainly report having situated kid pornography or various other illegal information on the device.

    Win32/LockScreen.AKP popup alert might wrongly claim to be acquiring from a law enforcement establishment and will certainly report having situated youngster porn or other illegal data on the device. The alert will likewise have a requirement for the individual to pay the ransom money.

Technical details

File Info:

crc32: 518F811Fmd5: 434267161cb9b5f5a2a1d89cc81456e8name: 434267161CB9B5F5A2A1D89CC81456E8.mlwsha1: 4440b306ffa7c4d585b524f29e856fa2e0b74a5asha256: b2dd5fbda56a557a20e6bb21cecde057594644c5c38e9d41377b55ceb7162ab8sha512: 72fc438a38d3d877ee4c1d211d489c2991760d45a527e397eee08ab921202d4e03fdb7c9e2140985adca7e1da56fc44ebc5003fdccb35f2bbae5b6c4a45ccf96ssdeep: 768:/uwWCwS+no6t0KXzD00SR26DhHYU862hH65qn4XRnWHl7:/uN2+noyP2Q0hHYUfUZnGnOxtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Win32/LockScreen.AKP also known as:

GridinSoft Trojan.Ransom.Gen
Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 003864c61 )
Elastic malicious (high confidence)
DrWeb Trojan.KillProc.15852
ALYac Gen:Variant.Ransom.176
CrowdStrike win/malicious_confidence_80% (D)
BitDefender Gen:Variant.Ransom.176
K7GW Trojan ( 003864c61 )
Cybereason malicious.61cb9b
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/LockScreen.AKP
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky Trojan-Ransom.Win32.Blocker.blrq
NANO-Antivirus Trojan.Win32.Blocker.ezjckv
MicroWorld-eScan Gen:Variant.Ransom.176
Tencent Win32.Trojan.Blocker.Palm
Ad-Aware Gen:Variant.Ransom.176
Sophos Mal/Generic-S
Comodo Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta Gen:NN.ZexaF.34790.cuW@aSg9rRdi
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.Generic.pt
FireEye Generic.mg.434267161cb9b5f5
Emsisoft Gen:Variant.Ransom.176 (B)
SentinelOne Static AI – Malicious PE
Jiangmin Trojan/Generic.zphp
Avira TR/Ransom.ziorg
eGambit Unsafe.AI_Score_74%
AegisLab Trojan.Win32.Blocker.j!c
GData Gen:Variant.Ransom.176
Acronis suspicious
McAfee Generic.dqz
MAX malware (ai score=95)
VBA32 Hoax.Blocker
Yandex Trojan.GenAsa!5T4GPwyi1s0
Ikarus Trojan.Win32.Diamin
Fortinet W32/LockScreen.AKP!tr
Panda Trj/GdSda.A
Qihoo-360 Win32/Ransom.Genasom.HgIASVwA

How to remove Win32/LockScreen.AKP ransomware?

Unwanted application has ofter come with other viruses and spyware. This threats can steal account credentials, or crypt your documents for ransom.
Reasons why I would recommend GridinSoft1

Run the setup file.

Run Setup.exe
GridinSoft Anti-Malware Setup

Press “Install” button.

GridinSoft Anti-Malware Install

Once installed, Anti-Malware will automatically run.

GridinSoft Anti-Malware Splash-Screen

Wait for the Anti-Malware scan to complete.

GridinSoft Anti-Malware Scanning

Click on “Clean Now”.

GridinSoft Anti-Malware Scan Result

Are Your Protected?

Full version of GridinSoft

If the guide doesn’t help you to remove Win32/LockScreen.AKP you can always ask me in the comments for getting help.

References

    About the author

    Robert Bailey

    Security engineer focused on malware behavior, removal workflows, and Windows hardening. Robert reviews threat articles for practical accuracy, checking detection names, symptoms, and cleanup steps before publication.

    Leave a Comment