This threat is a trojan that prevents you from accessing your desktop. It displays a message screen stating that you need to send payment to a certain prepaid mobile account to unlock the desktop.
It may have a randomly-generated file name. It creates the following registry entries so that it automatically runs every time Windows starts:
In subkey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Sets value: "Shell" With data: "<malware file name>"
In subkey: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Sets value: "explorer" With data: "<malware file name>"
Prevents you from accessing the desktop
It locks your desktop, preventing you from accessing it. It displays a message screen stating that illegal activity has been detected in your computer and that you have to send payment to a given mobile phone account to regain access. The screen may appear similar to the following:
This trojan claims that upon sending payment, you will be sent an unlock code to regain access. It also falsely claims association with Windows and Microsoft Security Essentials, when in fact this trojan has nothing to do whatsoever with Windows or Microsoft.