Windows 10: Unsigned copies of Lockapp.exe

I recently had issues with "lockapp.exe" after closing out of Call of Duty: Warzone. Upon exiting to the desktop, I would receive the message: "The system has detected a memory stack overflow error. A malicious user may use this to take control of the application." I'm paraphrasing the message a little bit, but that's basically it.


The first time this happened, I noticed that my ram usage had shot up to 100%, which to my memory has never happened before, and for the first time ever, I noticed lockapp.exe in my task manager window, taking up resources. I ended the task, and started looking into it, out of morbid curiosity. Online, people seemed to say that there should only be one instance of LockApp.exe and its related files.


Upon searching my hard drive, I found multiple copies of "LockApp.exe", "LockAppHost.exe", "LockAppBroker.dll" and "LockAppBroker.dll.mui" in multiple directories. The files are of varying size, and not all of them are signed by Microsoft.


I did a factory reset to be safe, and then only reinstalled programs I trusted, but I found the same files reinstalled, still not signed. I thought I was just being paranoid, so I continued on for a couple of days, being careful, looking for anything suspicious. I downloaded Malwarebytes, and for some reason it found issues with Google chrome files. Neither Malwarebytes or kaspersky found any other issue.


I've just performed another installation of windows 10, after downloading the ISO from the Microsoft website. At this point I'm sure that I'm crazy, because the same multiple instances of the lockapp files are in my system. They're dated as being modified months prior, and they are unsigned. Is this the result of a virus? Can someone please help put my mind at ease?

:)

 

Trying to Install Unsigned Driver for DJI Flight Controller on USB

You might try this:

Installing Unsigned Drivers by Disabling Integrity Checks
To disable integrity checks:
STEP 1: Open the Command Prompt as admin from the Power User menu, then execute the command: bcdedit /set nointegritychecks off
STEP 2: After executing the command, restart your PC, and then proceed in installing the unsigned driver for your system.
STEP 3: To re-enable integrity check, execute the below command as an admin in the command prompt: bcdedit /set nointegritychecks on
STEP 4: When you get the message saying the operation was successful, restart your system and you’re good to go.

 

How to install an unsigned driver


Cannot remember exact menu as not at pc, but its via the troubleshooting menu in recovery and updates. Somewhere an advanced option to restart pc, then it gives a list of options and one is to restart with unsigned drivers.

 

Unsigned files in system32

I used sigcheck to check system32 earlier today and found that several .dll and .exe files were marked as unsigned. Most of these said that they were from Microsoft in their description. I googled it and it seems like some Microsoft files just aren't signed.
Does any one know why that is?

There were also three files that didn't seem to be related to Microsoft. The first was nvinitx.dll that couldn't build a certificate chain to a trusted root authority and seemed to be from Nvidia, and a .dll as well as a .exe that were unsigned and seemed
to be from Vulkan Runtime. I checked them all with VirusTool and they seemed safe, but is there any reason for them to not have a signature in that case?

Thanks in advance,
Oliver