Windows Defender detects and removes this threat.

This malware family can download and run files on your PC and steal online user names and passwords. They can also use your PC as part of a DDoS attack.

These threats are installed on your PC when you click a link in a suspicious Facebook message.

Worm:Win32/Cridex.G is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted computers. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.

Windows Defender Antivirus detects and removes this threat.

If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.

This family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").

It pretends to be from a national police force and tries to scare you into paying a fine to unlock your PC.

See the Technical information tab for examples of the lock screen.

Typically, this threat gets onto your PC from a drive-by download attack. It might also have installed itself on your PC if you visit a compromised webpage.

You can read more on our ransomware page.