Trojan.Winlock viral infection's specifics are described. Consequences of Trojan.Win lock's deployment in OS are considered. neutralization algorithm depending on ability booting OS in safe mode, another OS usage on infected PC, usage of different system account, infection only one system account (changes affected on HKEY_CURRENT_USER registry branch only) are offered. In case of failure current OS booting solution using external OS are described.