Resolved unlockyourdesktop.info to 199.96.156.208
Yet another survey based winlocker.
This one follows the established pattern of ukash and moneypack winlockers by loading a webpage that contains the surveys rather than simply loading the offers like the previous variants.
 |
| Winlocker site showing offers |
This version does not appear to do anything to prevent the use of ctrl + alt + delete or alt + tab to remove it.
Interesting string in it: C:UsersAlinDocumentsProject1.vbp
Survey gate information:
www.adworkmedia.com/gLoader.php?GID=5325&pubID=8318&go=&sid=
Hosting infos: http://whois.domaintools.com/199.96.156.208