Skip to main content
Microsoft Security Intelligence
38 entries found. Displaying page 1 of 2.
Updated on Oct 07, 2016
Alert level: severe
Updated on Nov 01, 2020
Alert level: severe
Updated on Jun 12, 2014

Windows Defender detects and removes this threat.

This threat is an audio file (MP3) used by some variants of the Ransom:Win32/Tobfy family of ransomware trojans, such as Ransom:Win32/Tobfy.L and Ransom:Win32/Tobfy.G.

The audio file contains a fake FBI warning message that says your computer is blocked for "violation of federal law". The message is played repeatedly and cannot be stopped.

If your computer is infected with this file, then it is likely you are also infected with other ransomware components, such as Ransom:HTML/Genasom.D. These components may prevent access to your computer by covering your desktop with a page that also demands payment of the fine.

You can read more on our ransomware page.

Alert level: severe
Updated on Jun 12, 2014

Windows Defender detects and removes this threat.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine to unlock your PC.

You can read more on our ransomware page.

Alert level: severe
Updated on Aug 05, 2016

Microsoft Defender Antivirus detects and removes this threat.

This threat uses an infected Microsoft Office file to install Ransom:Win32/Tobfy ransomware onto your PC.

It can arrive on your PC as spam email attachment, usually as a Word file (.doc) using social-engineering to convince you to enable macros after opening the document.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Jun 08, 2017

Microsoft security software detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

Windows 10 protects you from ransomware. Read more:

Windows 10 Creators Update provides next-gen ransomware protection

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Jun 12, 2014

Windows Defender detects and removes this threat.

This threat stops you from loading Windows and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

It tries to scare you into paying a fine to unlock your PC.

You can read more on our ransomware page.

Alert level: severe
Updated on Oct 31, 2012
Alert level: severe
Updated on Mar 25, 2013
Alert level: severe
Updated on Dec 11, 2012
Alert level: severe
Updated on Sep 28, 2012
Alert level: severe
Updated on Dec 27, 2012
Alert level: severe
Updated on Nov 20, 2012
Alert level: severe
Updated on Jul 13, 2012
Alert level: severe
Updated on May 04, 2012
Alert level: severe
Updated on May 21, 2012
Alert level: severe
Updated on Sep 25, 2012
Alert level: severe
Updated on Nov 06, 2012
Alert level: severe
Updated on Aug 30, 2012
Alert level: severe
Updated on Jul 19, 2012
Alert level: severe