VirLock is a ScreenLocker ransomware first seen around 2015. It can spread from one computer to another using file infection (explained in section 4.3 virus or file infector in Chapter 1, Malware from Fun to Profit, and also in Chapter 3, Ransomware Distribution). The name Vir might have been derived from the term Virus, which is usually used to refer to file infectors by malware researchers. We have described earlier that a file infector will embed its code into other clean executable files on the system. Thus, when the clean executables are executed, they will also act as ransomware:

VirLock asks the victim to pay something around 1.5 bitcoins. The screen locker of VirLock shows a police ransomware message that seems to serve notice from the law authorities.