ANSSI Ransomware

Posted: April 4, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	1/10
Infected PCs:	38

First Seen:	April 4, 2013
Last Seen:	February 7, 2023
OS(es) Affected:	Windows

ANSSI Ransomware is a Police Ransomware Trojan that displays fake ANSSI warnings while requesting fraudulent money transfers that are disguised as legal fines. ANSSI Ransomware's variants include multiple types of Police Trojans that target French PC users, including the Office Central de Lutte contre la Criminalité Ransomware, and their attacks never are indicative of any type of real law enforcement action against your computer. Because paying to unlock your computer from ANSSI Ransomware's popup is a risky solution, SpywareRemove.com malware researchers recommend an alternative: using standard security techniques to disable ANSSI Ransomware, after which you can remove ANSSI Ransomware with whatever anti-malware program you like.

Why France's Network Security Appears to Be At Odds with Your Computer's Security

ANSSI Ransomware uses infection vectors that disguise its true intentions, with probable sources including drive-by-download attacks hosted on hacked websites, compromised ad networks and Trojan droppers carried through spam e-mail. After being installed, ANSSI Ransomware displays a warning message that claims to have come from France's ANSSI, AKA the French Network and Information Security Agency. True to the style of most Police Trojans, ANSSI Ransomware's pop-up accuses your PC of being used to commit illegal acts and proceeds to attempt to collect a fraudulent legal fee – which, SpywareRemove.com malware experts heartily recommend that you don't pay.

ANSSI Ransomware will prevent you from closing or minimizing its pop-up window, which will cover your desktop and keep you from using any other applications – presumably until you feel the need to pay its 'fine.' However, SpywareRemove.com malware experts can recommend cheaper methods of dealing with ANSSI Ransomware than transferring sums through Ukash.

ANSSI Ransomware's attacks are highly similar to those of other Police Trojan Trojans that have targeted France in the past such as (as just a few of numerous examples) Police Nationale FR Ransomware, Votre ordinateur est bloqué Gendarmerie Ransomware, Office Central de Lutte contre la Criminalité Ransomware, 'Votre ordinateur est bloque' France Ransomware, 'Ordinateur est verrouillé' Ransomware and the France Ministère de l’Intérieur Virus.

Keeping Your Nation's Online Security in Sync with Your PC's Security

As a common form of ransomware, ANSSI Ransomware is illegal and never should be rewarded with money in exchange for its attacks against your computer. You can disable ANSSI Ransomware, which can be accomplished by booting your PC from any USB drive or by booting in Safe Mode, without any legal penalties for the action. SpywareRemove.com malware analysts personally suggest removing ANSSI Ransomware, once it's disabled, with any qualified anti-malware product – particularly since ANSSI Ransomware may have been installed by other PC threats that also are on your computer.

France is one of the most popular targets of Police Trojan-based attacks like ANSSI Ransomware's own fake warnings, but other countries throughout the world also have been endangered by similar PC threats that are customized for different regions. Germany, the UK, the USA and Canada are some of the commonly-targeted regions, but a resident of any country should be suspicious of any apparent 'Police' pop-up that appears and requests money in return for forgiveness of supposed criminal actions on their part.

Technical Details

Additional Information

The following URL's were detected:

incognitosearching.com

Ranssiria Ransomware