BREAKING NEWS: Windows Defender Advanced Threat Protection (Windows Defender ATP) to include AI-driven automated investigation and remediation capabilities later this year.Learn more
Alert level: Severe Detected with Windows Defender Antivirus
Also detected as: Spyware/Win32.Zbot (AhnLab) TR/Ransom.EZ.577 (Avira) Trojan.Ransomlock!g33 (Symantec) Trojan.Winlock.6049 (Dr.Web) Trojan-Dropper.Win32.Dapato (Ikarus) Trojan-Ransom.Win32.Gimemo.attq (Kaspersky)
Windows Defender Antivirus detects and removes this threat.
If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
This family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").
It pretends to be from a national police force and tries to scare you into paying a fine to unlock your PC.
See the Technical information tab for examples of the lock screen.
Typically, this threat gets onto your PC from a drive-by download attack. It might also have installed itself on your PC if you visit a compromised webpage.
You can read more on our ransomware page.