Windows Defender detects and removes this threat.

This threat locks your PC and displays a full-screen message, commonly called a "lock screen".

It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.

See the Technical information tab for examples of the lock screen.

Typically, this threat gets on your PC when you visit a hacked webpage.

You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.

Find out ways that malware can get on your PC.

Windows Defender detects and removes this threat.

This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.

Typically, this threat gets on your PC when you visit a hacked webpage.

You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.

Find out ways that malware can get on your PC.

It is distributed by various exploit kits, such as Blacole and Exploit:JS/Coolex.A, and is often disguised as an Adobe Flash installer or video file to trick you into downloading and running it.

You can read more on our ransomware page.

Windows Defender detects and removes this threat.

This threat can download other malware onto your PC.

It is from a family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").

See the Ransom:Win32/Urausy family entry, and our ransomware page for more information.

Find out ways that malware can get on your PC.