Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Sep 26, 2012 | Updated Sep 15, 2017

Trojan:Win32/Weelsof

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

Windows Defender detects and removes this threat.

Trojan:Win32/Weelsof is a family of ransomware trojans that targets people from certain countries. It locks your PC and displays a localized webpage that covers your desktop and demands the payment of a fine for the supposed possession of illicit material.

Some variants of Trojan:Win32/Weelsof can make lasting changes to your PC that make it difficult for you to download, install, run, or update your antivirus software.

Do not pay the fee or fine that this threat asks for. The message is a fraud.

If you've already paid, see our ransomware page for help on what to do now.

Run antivirus or antimalware software

The following Microsoft software detects and removes this threat:

However, because this threat can lock your screen, you might not be able to download or run antivirus or antimalware software. If that happens, you will need to use Windows Defender Offline:

The following articles might help if you're having trouble getting the tool to work:

After you've used Windows Defender Offline, you should make sure your security software is up to date and run a full scan:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Follow us