Ransom:Win32/Urausy.E
Windows Defender detects and removes this threat.
This threat locks your PC and displays a full-screen message, commonly called a "lock screen".
It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.
See the Technical information tab for examples of the lock screen.
Typically, this threat gets on your PC when you visit a hacked webpage.
You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.
Ransom:Win32/Urausy.C
Windows Defender detects and removes this threat.
This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.
Typically, this threat gets on your PC when you visit a hacked webpage.
You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.
Ransom:Win32/Urausy.A
Windows Defender detects and removes this threat.
This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.
Typically, this threat gets on your PC when you visit a hacked webpage.
You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.
Ransom:Win32/Urausy.D
Windows Defender detects and removes this threat.
This threat locks your PC and displays a full-screen message, commonly called a "lock screen". If this threat asks you to pay a fee or fine, do not pay it. The message is a fraud.
It pretends to be from the FBI or a national police force and tries to scare you into paying a fine to unlock your PC.
Typically, this threat gets on your PC when you visit a hacked webpage.
You can read more about this type on malware at the Ransom:Win32/Urausy family description or on our ransomware page.
Ransom:Win32/Urausy
Windows Defender Antivirus detects and removes this threat.
This family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").
It pretends to be from a national police force and tries to scare you into paying a fine to unlock your PC.
See the Technical information tab for examples of the lock screen.
It is distributed by various exploit kits, such as Blacole and Exploit:JS/Coolex.A, and is often disguised as an Adobe Flash installer or video file to trick you into downloading and running it.
You can read more on our ransomware page.
TrojanDownloader:Win32/Urausy.J
Windows Defender detects and removes this threat.
This threat can download other malware onto your PC.
It is from a family of ransomware locks your PC and displays a full-screen message (commonly called a "lock screen").
See the Ransom:Win32/Urausy family entry, and our ransomware page for more information.