Ransom:Win32/Isda
Windows Defender detects and removes this threat.
The threat encrypts your files and asks you to contact the email provided in order to receive instructions on how to decrypt your files.
This threat can be bundled with other malware. It can also be downloaded when you click on a link in a spam email.
Find out ways that malware can get on your PC.
You can read more on our ransomware page.
Ransom:Win32/Critroni.B
Windows Defender detects and removes this threat.
This threat locks your files and stops you from using them. It then shows you a message that tells you to pay money to get access to your files again.
It can be installed on your PC by TrojanDownloader:Win32/Dalexis, Spammer:Win32/Tedroo, by spam email or by exploit kits.
Ransom:MSIL/Hasadcrypt
Windows Defender detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.
Our ransomware FAQ page has more information on this type of threat.
Read our latest report: Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene.
Ransom:Win32/Teerac.A
Windows Defender detects and removes this threat.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
They can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or as a spam email attachment.
Our ransomware FAQ page has more information on this type of threat.
Read our latest comprehensive ransomware report:
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
Ransom:Win32/Warik.A
Windows Defender detects and removes this threat.
This ransomware encrypts the files on your PC so you can't use them. It shows you a message that says you must pay for decryption software to get access to your files again.
It can be installed on your PC by other malware, or you might have downloaded it from a torrent or file sharing site, thinking it was something else.
See our ransomware page for more information about this type of threat, including ways to prevent it and how to recover your files.
Ransom:Win32/Cendode.A
Windows Defender detects and removes this threat.
This threat can encrypt your files and ask you for a payment to unlock them.
Ransom:Win32/Crilock.D
Microsoft security software detects and removes this family of threats.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
See the Win32/Crilock family description for more information.
You can also read more about this type of threat on our Ransomware page.
Ransom:Win32/Zekwacrypt.A
Windows Defender detects and removes this threat.
This threat might have gotten on your PC from other malware. The threat renames and encrypts some files on your PC. It might ask you to pay money to a malicious hacker.
Windows 10 protects you from ransomware. Read more:
Windows 10 Creators Update provides next-gen ransomware protection
Our ransomware page has more information on this type of threat.
Ransom:Win32/Petya.B
Microsoft Defender Antivirus detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.
This ransomware has worm-like capabilities that allows it spread across infected networks. It's spreading capabilities include:
- Lateral movement using credential theft and impersonation
- Lateral movement using the EternalBlue and EternalRomance exploits
For more information on this threat, which caused an outbreak on Jun 27, 2017, read these blog posts on the Windows Security blog:
- Windows 10 platform resilience against the Petya ransomware attack
- New ransomware, old techniques: Petya adds worm capabilities
Our ransomware page has more information on this type of threat.
Ransom:MSIL/Vaultlock.A
Windows Defender detects and removes this threat.
This ransomware can encrypt the files on your PC so that you can't access them. This threat can be downloaded by other malware and is installed as coinvault.exe.
Our ransomware page has more information on this type of threat.
Ransom:MSIL/Tarocrypt
Windows Defender detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.
Our ransomware page has more information on this type of threat.
Ransom:Win32/Weelsof.C
Trojan:Win32/Weelsof.C is a trojan that connects to certain servers to download arbitrary files.
Ransom:Win32/Cryproto.A
Windows Defender detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.
Our ransomware page has more information on this type of threat.