Published Nov 11, 2012|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Spyware/Win32.Zbot (AhnLab) TR/Ransom.EZ.577 (Avira) Trojan.Ransomlock!g33 (Symantec) Trojan.Winlock.6049 (Dr.Web) Trojan-Dropper.Win32.Dapato (Ikarus) Trojan-Ransom.Win32.Gimemo.attq (Kaspersky)

Windows Defender Antivirus detects and removes this threat.

If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

This family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").

It pretends to be from a national police force and tries to scare you into paying a fine to unlock your PC.

See the Technical information tab for examples of the lock screen.

Typically, this threat gets onto your PC from a drive-by download attack. It might also have installed itself on your PC if you visit a compromised webpage.

You can read more on our ransomware page.


Latest news