CoronaLocker is another malware related to COVID-19
. It is screen locker distributed via a fake WiFi hacking program named wifihacker.exe. Upon execution it lock user out of windows. After logging again it make looping sound produce by the Microsoft Speech API saying corona virus. When the screen comes it display a VB script prompt asking for code to decrypt. which is "vb
", enter it and it goes off. Unfortunately, the malware creates a variety of Registry settings that prevent the Task Manager and Run commands from working, the Desktop icons are hidden, Start Menu is disabled.
Video showing CoronaLocker behavior.
CoronaLocker Ransomware Signatures
CoronaLocker Ransomware Download