Ransom:Win32/Tobfy!mp3
Windows Defender detects and removes this threat.
This threat is an audio file (MP3) used by some variants of the Ransom:Win32/Tobfy family of ransomware trojans, such as Ransom:Win32/Tobfy.L and Ransom:Win32/Tobfy.G.
The audio file contains a fake FBI warning message that says your computer is blocked for "violation of federal law". The message is played repeatedly and cannot be stopped.
If your computer is infected with this file, then it is likely you are also infected with other ransomware components, such as Ransom:HTML/Genasom.D. These components may prevent access to your computer by covering your desktop with a page that also demands payment of the fine.
You can read more on our ransomware page.
Ransom:Win32/Tobfy.N
Windows Defender detects and removes this threat.
This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
It tries to scare you into paying a fine to unlock your PC.
You can read more on our ransomware page.
TrojanDropper:O97M/Tobfy
Microsoft Defender Antivirus detects and removes this threat.
This threat uses an infected Microsoft Office file to install Ransom:Win32/Tobfy ransomware onto your PC.
It can arrive on your PC as spam email attachment, usually as a Word file (.doc) using social-engineering to convince you to enable macros after opening the document.
Ransom:Win32/Tobfy.X
Microsoft security software detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.
Windows 10 protects you from ransomware. Read more:
Windows 10 Creators Update provides next-gen ransomware protection
Our ransomware page has more information on this type of threat.
Ransom:Win32/Tobfy.W
Windows Defender detects and removes this threat.
This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
It tries to scare you into paying a fine to unlock your PC.
You can read more on our ransomware page.