How to Remove Trojan.LockScreen.EM | Updated

0
57

I wrote this article to help you remove Trojan.LockScreen.EM. This Trojan.LockScreen.EM removal guide works for all Windows versions.

Trojan.LockScreen.EM is one of the versions of the LockScreen Trojan which infiltrates your computer without your knowledge and blocks the access to your files and programs. Trojans from this group behave like ransomware applications, due to the fact that they ask for money in order to unlock the screen. For instance, you might be asked to send an SMS message to receive a password.

Nevertheless, Trojan.LockScreen.EM does not ask for payment, it only locks your screen and displays a suspicious message. For that reason, you should install a legitimate antispyware tool to delete Trojan.LockScreen.EM from your PC.

Computer users are well aware of other types of ransomware applications, such as Ukash FBI Virus programs. It is certain that all of these apps are distributed by Trojans, but they are more dangerous than Trojan.LockScreen.EM. To be precise, this program looks more like a beta version because it does not ask you to pay in order to unlock your machine.

As soon as Trojan.LockScreen.EM enters the computer, it installs one file and adds two registry values. The file which belongs to this infection is named DragonDay.exe and it usually gets dropped in ProgramData directory. Value name “Dragon Day” is also added to that part of Windows registry which is responsible for loading the program automatically each time the Windows boots up.

If your system is infected with Trojan.LockScreen.EM, you will notice it right away. This application does not beat around the bush. The Trojan will display a fast loading screen which says:

3 new backdoors detected
Zulu program detected
System extremely vulnerable

After that, the screen will change into a flamboyant message that reads “THE PEOPLES REPUBLIC WELCOMES YOUR ALLEGIANCE,” but it does not offer any further explanation as to what is happening.

In case you got infected with Trojan.LockScreen.EM, you should not panic. This program is not capable of stealing your money. Still, you definitely should remove it from the system if you want to access your files again. Keep in mind that you must not attempt manual removal unless you are an experienced computer user.

Most probably, Trojan.LockScreen.EM is not the only malicious infection which is present on your computer. Thus, after restoring your desktop access, you have to scan your PC with a reputable antispyware tool to search for other potential threats. In case you need any assistance, you can read the removal instructions below. They will help you to unlock your screen and terminate Trojan.LockScreen.EM entirely.

Trojan.LockScreen.EM Uninstall

STEP-1 Run the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.

task manager

Look carefully at the file names and descriptions of the running processes. If you find any suspicious one, search on Google for its name, or contact me directly to identify it. If you find a malware process, right-click on it and choose End task.

STEP-4

Open Control Panel by holding the Win Key and R together. Write appwiz.cpl in the field, then click OK.

appwiz

Here, find any program you had no intention to install and uninstall it.

STEP-6

Open MS Config by holding the Win Key and R together. Type msconfig and hit Enter.

msconfig

Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Still can not remove Trojan.LockScreen.EM from your computer? Please, leave a comment below, describing what steps you performed. I will answer promptly.

SHARE
Daniel Stoyanov
Daniel Stoyanov has a Master's degree in Computer Science from the Technical University of Sofia, Bulgaria. He is also a Microsoft Certified Professional. Daniel provides top cyber security news with in-depth coverage of malware, vulnerabilities, PC and Network security, online safety.If you have any questions feel free to ask him right now.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Time limit is exhausted. Please reload CAPTCHA.