Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 6 of 25.
Updated on May 19, 2016

Windows Defender detects and removes this threat.

The threat is an HTML message that asks you to pay a ransom to regain access to the files encrypted by Ransom:Win32/Tescrypt.

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Jun 08, 2017

Microsoft security software detects and removes this threat.

This trojan stops you from using your PC by showing an alert message screen. This screen can include adult content and might ask you to pay a "fine" or fee to unlock your PC.

This threat also replaces important Windows system files with copies of itself.

Due to the damage this threat can do to your PC, you might need to reinstall some files from a Windows installation disc, or a backup source.

Windows 10 protects you from ransomware. Read more:

Windows 10 Creators Update provides next-gen ransomware protection

Alert level: severe
Updated on Jun 08, 2017

Windows Defender detects and removes this threat.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine to unlock your PC.

Windows 10 protects you from ransomware. Read more:

Windows 10 Creators Update provides next-gen ransomware protection

You can read more about this type of threat on our ransomware page.

Alert level: severe
Updated on Jun 08, 2017

Windows Defender detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker. It can also be downloaded by other malware like JS/Nemucod as its payload.

Windows 10 protects you from ransomware. Read more:

Windows 10 Creators Update provides next-gen ransomware protection

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Aug 09, 2017

This threat has been renamed to Ransom:Win32/Ergop.A.

Alert level: severe
Updated on Aug 13, 2014

Windows Defender detects and removes this threat.

This threat encrypts your files and displays a webpage that asks you to pay a fee to unlock them.

More information on this type of threat in the Ransom:Win32/Crilock.A description and in our Ransomware page.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Dec 30, 2015

Windows Defender detects and removes this threat.

This ransomware can encrypt the files on your PC so that you can't access them. Threats in this ransomware family can be installed from Trojan:BAT/Zuquitache

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Jun 20, 2024
Alert level: severe
Updated on Jun 20, 2024
Alert level: severe
Updated on Jun 04, 2014
This threat is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Jun 04, 2014

This ransomware prevents you from accessing your computer. It covers your entire desktop with an image pretending to be from your local authorities, asking you to pay a fine to regain access. The image covering the desktop is downloaded from a certain website.

Alert level: severe
Updated on Oct 24, 2019

Microsoft Defender Antivirus detects and removes this threat.

This ransomware  renders files inaccessible by encrypting them. It is also usually spread by Trojan:Win32/Trickbot and Win32/Emotet malware families via phishing emails.

After encrypting files, this ransomware sets the desktop wallpaper and stops processes from running on your machine without your consent.

Find out ways that malware can get on your PC.  

Read our report about ransomware protection: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 25, 2024
Alert level: severe
Updated on Oct 27, 2014

Microsoft security software detects and removes this family of threats.

This ransomware family can lock your web browser by showing you a message that asks you to pay a fine. The message can pretend to be from a law enforcement agency and tells you to pay money to unlock your browser.

They can also stop you from closing your web browser, using the address bar, or pressing any shortcut keys.

You can be infected with this threat when you visit or are redirected to a malicious website.

See the Ransom:JS/Brolo family description for more information.

Alert level: severe
Updated on Jan 10, 2018

Microsoft Defender Antivirus detects and removes this threat.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine or texting a premium-charge phone number to unlock your PC.

You can read more on our ransomware page.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 10, 2018

Microsoft Defender Antivirus detects and removes this threat.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine to unlock your PC.

Our ransomware FAQ page has more information on this type of threat.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 10, 2018

Microsoft Defender Antivirus detects and removes this threat.

The threat is a HTML page used by the Ransom:Win32/Urausy.A ransomware trojan.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine to unlock your PC.

Our ransomware FAQ page has more information on this type of threat.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 10, 2018

Windows Defender AV detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

Our ransomware FAQ page has more information on this type of threat.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 10, 2018
Microsoft Defender Antivirus detects and removes this threat. 

The threat locks your screen and prevents you from using your desktop. It shows you a message saying that if you want to regain access to your desktop, you have to pay a fine in the form of an SMS sent to a premium number.

This type of threat is known as ransomware.

Our ransomware FAQ page has more information on this type of threat.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe
Updated on Jan 10, 2018

Microsoft Defender Antivirus detects and removes this threat. 

This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, don't pay it. The message is a fraud.

It pretends to be from your local police force and tries to scare you into paying a fine to unlock your PC.

It's likely your PC has also been infected with other malware from the Win32/Reveton family.

Our ransomware FAQ page has more information on this type of threat.

The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.

Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.

Alert level: severe