LockyService Wiki
Windows Service to monitor file events for crypto ransomware
Status: Inactive
Brought to you by:
sojasprosse
Windows Service to monitor drive c: for file events with crypto specific file extensions or with big file entropy.
Commandline parameter:
-i
installs the service to C:\Program Files\LockyMonitor\lockymonitor
-u
uninstall the service and delete the lockymonitor folder
To install the service run InstallLockyService.CMD as administrator.
To uninstall the service run UninstallLockyService.CMD as administrator.
To change the Program settings edit the xml file:
"C:\Program Files\Lockyservice\LockyService.exe.config"
Dokumentation of the programm parameters in LockyService.exe.config is not avaliable yet.
There are some comments about the parmaters in the c# source code.