LCRYX Ransomware UAC and Defense Control Lockdown via Registry Writes

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•2

Detects LCRYX ransomware or similar malicious scripts using wscript.exe or cscript.exe to disable Windows security features and system controls via registry modifications, such as disabling UAC, Task Manager, and Registry Tools.