This threat is a malicious program designed to lock the desktop to force the user to complete an offer which supposedly unlocks the screen.
It copies itself in the Windows startup folder so that it automatically runs whenever a user logs on or Windows starts.
Performs desktop changes
The threat disables the Task Manager as well as hides the system taskbar.
It also attempts to lock the desktop and displays a request to complete an offer to unlock the screen:
Behind the "Offer Window", the threat initates an HTTP request to the following page:
The server responds with a message saying "You are Locked", and displays unwanted images that may imply that the user is viewing inappropriate content:
The message implies that the user can complete any of the two offers. This often leads to fraudalent promotions that claim the user has won an award:
However, the user requires an email address and Personal Identifiable Information (PII) to claim the prize: