Published Nov 28, 2012|Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Win32/Injector.ZPB (ESET) BackDoor.Andromeda.22 (Dr.Web) Mal/EncPk-AFN (Sophos) PWS-Zbot.gen.anm (McAfee) TROJ_LOCKSCRN.SM (Trend Micro) Crypt.BBQL (AVG) Trojan.Win32.Buzus (Ikarus) Trojan.Win32.Buzus.mssp (Kaspersky) Trojan.Win32.Inject.ewxm (Kaspersky) Trojan/Win32.Zbot (AhnLab) W32/Injector.HB (Command) W32/Urausy.B (Norman)


Windows Defender detects and removes this threat.

This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.

Typically, this threat gets on your PC when you visit a hacked webpage.

You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.

Find out ways that malware can get on your PC.


Latest news