Published May 19, 2016 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: No associated aliases


Windows Defender Antivirus  detects and removes this threat.

This can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.ransomware

Our  has more information on this type of threat.ransomware page

Note: On June 27, 2017, a new variant of Ransom:Win32/Petya was observed spreading in several countries. The new variant added a worm-like capability that allows it to spread across affected networks. Read about the Petya outbreak here:

Microsoft doesn’t recommend you pay the fine. There is no guarantee that paying the ransom will give you access to your files.

If you've already paid, see for help on what to do now.our ransomware page

Use the following free software to detect and remove this threat:Microsoft

You should also run a full scan. A full scan might find hidden malware.

To restore your PC, you might need to . See our  for more and run Windows Defender Offlineadvanced troubleshooting page

You can also ask for help from other PC users at the .Microsoft virus and malware community

If you’re using , see our .Windows XPWindows XP end of support page

The (MAPS) uses cloud protection to help guard against the latest malware threats. It’s turned on by default for Microsoft Security Essentials and Windows Defender for Windows 10. Microsoft Active Protection Service

Run antivirus or antimalware software
Advanced troubleshooting
Use cloud protection
Follow us