Win32/Crilock
Microsoft security software detects and removes this family of threats.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
They can be installed on your PC by other malware, such as TrojanDownloader:Win32/Upatre and PWS:Win32/Zbot.gen!GO. It can also spread through infected removable drives, such as USB flash drives.
You can read more about this type of threat on our Ransomware page.
Worm:MSIL/Crilock.A
Windows Defender detects and removes this threat.
Worm:MSIL/Crilock.A can pose as a software update or an activator for paid software like TeamViewer, Photoshop, ESET antivirus, and Windows Office. It spreads to other PCs via removable drives.
It encrypts your files and asks you to pay a ransom to retrieve the. It asks you to pay using Bitcoin within 72 hours.
Ransom:Win32/Crilock.B
Windows Defender detects and removes this threat.
This threat encrypts your files and displays a webpage that asks you to pay a fee to unlock them.
More information on this type of threat in the Ransom:Win32/Crilock.A description and in our Ransomware page.
Behavior:Win32/Crilock.A
Microsoft Defender Antivirus detects this threat.
This detection is used to monitor suspicious or malware-like behavior on your PC. It is a generic detection, which means the malicious behaviors can greatly vary.
If we receive a significant number of reports about this suspicious behavior, we will add a specific detection and include a more detailed analysis.
Trojan:Win32/Crilock.A
Windows Defender detects and removes this threat.
This threat has been renamed to Ransom:Win32/Crilock.A.
Ransom:Win32/Crilock.D
Microsoft security software detects and removes this family of threats.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
See the Win32/Crilock family description for more information.
You can also read more about this type of threat on our Ransomware page.
Ransom:MSIL/Crilock.A
Microsoft security software detects and removes this family of threats.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
See the Win32/Crilock family description for more information.
You can also read more about this type of threat on our Ransomware page.
Ransom:Win32/Crilock.A
Windows Defender detects and removes this threat.
It encrypts your files and displays a webpage that asks you to pay a fee to unlock them.
This threat is usually installed on your PC by other malware. You can read more about ransomware on our Ransomware page.
Windows 10 protects you from ransomware. Read more:
Windows 10 Creators Update provides next-gen ransomware protection
TrojanSpy:MSIL/Zbot
Microsoft Defender Antivirus detects and removes this threat.
This threat can steal your personal and financial information, and give a malicious hacker access and control of your PC. It can also lower your Internet browser security and turn off your firewall.
It can be downloaded onto your PC by other malware, including threats from the Win32/Crilock and Win32/Necurs families. It can also be installed from a spam email attachment or when you visit a hacked or compromised website.
See the Win32/Zbot family description for more information.
Ransom:Win32/Teerac.E
Windows Defender detects and removes this threat.
This ransomware malware encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
It can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or when you open a spam email attachment.
There is more information available in the Win32/Teerac family description.
Our ransomware FAQ page has more information on this type of threat.
Read our latest comprehensive ransomware report:
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
Ransom:HTML/Teerac.A
Windows Defender detects and removes this threat.
This threat is part of the Ransom:Win32/Teerac family. This ransomware encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
They can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or as a spam email attachment.
Our ransomware FAQ page has more information on this type of threat.
Read our latest comprehensive ransomware report:
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
Ransom:Win32/Teerac.A
Windows Defender detects and removes this threat.
This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.
They can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or as a spam email attachment.
Our ransomware FAQ page has more information on this type of threat.
Read our latest comprehensive ransomware report:
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
Behavior:Win32/Teerac.B
Microsoft security software detects and removes this threat.
This threat is part of the Ransom:Win32/Teerac family. It can encrypt your files and show you a webpage that asks you to pay a fee to unlock them.
It can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or by a spam email attachment.
See the Ransom:Win32/Teerac description for more information.
Our ransomware FAQ page has more information on this type of threat.
Read our latest comprehensive ransomware report:
Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene
PWS:Win32/Zbot.gen!GOV
Microsoft security software detects and removes this threat.
This threat can steal your personal and financial information and give a hacker access and control of your PC. It can also lower your Internet browser security and turn off your firewall.
We have seen this threat download other malware, including Trojan:Win32/Crilock.A and Trojan:Win32/Necurs. Crilock is a ransomware family that can encrypt the files on your PC and then demand money to unlock them. Necurs is family of malware that can turn off your security software and redirect your web browser.
It can be installed on your PC via spam emails and hacked websites, or packaged with other malware families.
The Win32/Zbot family description has more information.
PWS:Win32/Zbot
Microsoft security software detects and removes this threat.
This family of trojans can steal your personal and financial information and give a hacker access and control of your PC. They can also lower your Internet browser security and turn off your firewall.
We have seen these threats download other malware, including Trojan:Win32/Crilock.A and Trojan:Win32/Necurs. Crilock is a ransomware family that can encrypt the files on your PC and then demand money to unlock them. Necurs is family of malware that can turn off your security software and redirect your web browser.
Win32/Zbot can be installed on your PC via spam emails and hacked websites, or packaged with other malware families.
Win32/Zbot
Microsoft security software detects and removes this threat.
This family of trojans can steal your personal and financial information, and give a malicious hacker access and control of your PC. They can also lower your Internet browser security and turn off your firewall.
We have seen these threats download other malware, including threats from the Win32/Crilock and Win32/Necurs families. Crilock ransomware can encrypts your files and then demand money to unlock them. Necurs malware can disable your security software and redirect your web browser.
Win32/Zbot can be installed on your PC via spam emails and hacked websites, or packaged with other malware families.