Misc/WinLock

Analysis

Misc/WinLock is the detection for WinLock, a program that is used to restrict some users from accessing the desktop and some system applications.
The program and source codes may be found at the following web site:

• http://www.codeproject.com/KB/winsdk/AntonioWinLock.aspx

Although this program may be used for legitimate purposes, the features of this program have been used by malware.

Recommended Action

FortiGate Systems

• Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the 'Allow Push Update' option.
  FortiClient Systems
  
• Quarantine/delete files that are detected and replace infected files with clean backup copies.