Ransom:Win32/Reveton.F
Microsoft Defender Antivirus detects and removes this threat.
Ransom:Win32/Reveton.F is a member of the Reveton family of ransomware programs that targets users from certain countries. The threat locks your PC and displays a localized webpage that covers your desktop, and demands the payment of a fine for the supposed possession of illicit material.
Our ransomware FAQ page has more information on this type of threat.
The trend towards increasingly sophisticated malware behavior, highlighted by the use of exploits and other attack vectors, makes older platforms so much more susceptible to ransomware attacks. From June to November 2017, Windows 7 devices were 3.4 times more likely to encounter ransomware compared to Windows 10 devices.
Read our latest report: A worthy upgrade: Next-gen security on Windows 10 proves resilient against ransomware outbreaks in 2017.
Ransom:Win32/Lyposit.A
This ransomware prevents you from accessing your computer. It covers your entire desktop with an image pretending to be from your local authorities, asking you to pay a fine to regain access. The image covering the desktop is downloaded from a certain website.
Ransom:Win32/Loktrom.E
Ransom:Win32/Lyposit.B
This ransomware prevents you from accessing your computer. It covers your entire desktop with an image pretending to be from your local authorities, asking you to pay a fine to regain access. The image covering the desktop is downloaded from a certain website.
Ransom:Win32/Tobfy!mp3
Windows Defender detects and removes this threat.
This threat is an audio file (MP3) used by some variants of the Ransom:Win32/Tobfy family of ransomware trojans, such as Ransom:Win32/Tobfy.L and Ransom:Win32/Tobfy.G.
The audio file contains a fake FBI warning message that says your computer is blocked for "violation of federal law". The message is played repeatedly and cannot be stopped.
If your computer is infected with this file, then it is likely you are also infected with other ransomware components, such as Ransom:HTML/Genasom.D. These components may prevent access to your computer by covering your desktop with a page that also demands payment of the fine.
You can read more on our ransomware page.
TrojanDropper:Win32/Frovserp.A
Windows Defender detects and removes this threat.
Trojan:Win32/Tobfy.S is a ransomware trojan that prevents you from accessing your desktop by covering it with a certain image.
The image contains fake instructions and misleading information about a ransom that you need to pay to regain control of your PC. The image illegally invokes legal authorities to try to convince you to pay the ransom.