Windows Defender detects and removes this threat.

Trojan:Win32/Weelsof is a family of ransomware trojans that targets people from certain countries. It locks your PC and displays a localized webpage that covers your desktop and demands the payment of a fine for the supposed possession of illicit material.

Some variants of Trojan:Win32/Weelsof can make lasting changes to your PC that make it difficult for you to download, install, run, or update your antivirus software.

Windows Defender detects and removes this threat.

This family of ransomware threats displays a localized webpage that covers your desktop and demands the payment of a fine for the supposed possession of illicit material.

Some variants of Win32/Weelsof can make lasting changes to your PC that make it difficult for you to download, install, run, or update your antivirus software.

Windows Defender detects and removes this threat.

This threat is ransomware that might make your PC unusable and ask you to pay fine to regain access to your PC. See the Win32/Weelsof family description for more information.

Find out ways that malware can get on your PC.

Windows Defender detects and removes this threat.

Ransom:Win64/Weelsof.A is a ransomware that might lock your screen and ask you for financial information or a "fine" so that your PC can be restored to normal.

Find out ways that malware can get on your PC.

Windows Defender detects and removes this threat.

Ransom:Win32/Weelsof.A is a ransomware threat that locks your screen and asks you to pay a "fine" to regain access.

Some images of what this webpage looks like are available in the Win32/Weelsof description.

More information about ransomware is available in our ransomware page.

Find out ways that malware can get on your PC.

Trojan:Win32/Weelsof.C is a trojan that connects to certain servers to download arbitrary files.

Windows Defender detects and removes this threat.

This threat can collect your sensitive information and send it to a malicious hacker.

Find out ways that malware can get on your PC.

Windows Defender detects and removes this family of threats.

You should also update your software to be fully protected.

The Blacole exploit pack tries to infect your PC with other malware, such as trojans and viruses. It also known as "Blackhole".

See our page about exploits and learn how to update common software.

When you visit a malicious or compromised website, Blacole scans your PC for vulnerabilities or weaknesses in your software.

You might visit the website from a link or attachment in an email, or from a previously safe website that has been hacked.

The threat uses those vulnerabilities it has found on your PC to download malware onto your PC:

Typically, the Blacole exploit kit attempts to exploit vulnerabilities in applications such as Oracle Java, Sun Java, Adobe Acrobat and Adobe Reader.