Published Oct 15, 2014|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: No associated aliases

Windows Defender detects and removes this threat.

This ransomware family encrypts your files and shows you a webpage that asks you to pay a fee to unlock them.

They can be installed on your PC by other malware, such as TrojanDownloader:O97M/Donoff, or as a spam email attachment.

Our ransomware FAQ page has more information on this type of threat.

Read our latest comprehensive ransomware report:

Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene