‘Cyber Command of Oregon’ Ransomware

Posted: October 25, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	4

First Seen:	October 16, 2013
OS(es) Affected:	Windows

The 'Cyber Command of Oregon' Ransomware is a variant of the 'Cyber Command of [State Name]' Ransomware, a sub-division of the Urausy family of fake Police Trojans. As a United States-specialized PC threat, the 'Cyber Command of Oregon' Ransomware detects appropriate victims through their IP addresses and displays erroneous legal warnings that block their desktops. This attack is intended to force you to pay a fee that supposedly removes the 'Cyber Command of Oregon' Ransomware's Windows lockdown. However, malware experts stress that the 'Cyber Command of Oregon' Ransomware is an illegal Trojan and never should be paid; instead, removing the 'Cyber Command of Oregon' Ransomware with standardized anti-malware procedures and software is the simplest way to thaw its system lockdown.

The Blind Spy on Your Online History

The 'Cyber Command of Oregon' Ransomware is a new spinoff of previous Police Ransomware Trojans known for singling out victims from various states in the USA. The 'Cyber Command of Nevada' Ransomware,' the'Cyber Command of New York' Ransomware, the 'Cyber Command of California' Ransomware, the 'Cyber Command of South Texas' Ransomware and the 'USA Cyber Crime Investigations' Ransomware are examples of members of the same family. Although the 'Cyber Command of Oregon' Ransomware displays a pop-up warning that's intended to make it seem like the 'Cyber Command of Oregon' Ransomware has the authority of your local government, the 'Cyber Command of Oregon' Ransomware actually is malware and completely illegal – like all of its other relatives for states other than Oregon.

The 'Cyber Command of Oregon' Ransomware's main function is to block your access to your desktop (and other Windows programs) by displaying a borderless browser pop-up. This pop-up warning claims that your computer has been found to be associated with illegal actions related to Internet usage such as downloading pirated software, but the 'Cyber Command of Oregon' Ransomware actually may launch its attack even on computers that are completely innocent of such misdeeds. SpywareRemove.com malware experts also emphasize that the 'legal fee' the 'Cyber Command of Oregon' Ransomware demands should not be paid and will not help you unlock your PC.

The Key to the 'Cyber Command of Oregon' Ransomware's Desktop Handcuffs

Like other fake Police Trojans with a tendency to block your use of other applications, the 'Cyber Command of Oregon' Ransomware is categorized as a high-level security risk and always should be removed from your PC as fast as possible. To work around the system blockade cause by the 'Cyber Command of Oregon' Ransomware's pop-up and related functions, SpywareRemove.com malware researchers encourage the use of basic security features like Safe Mode or a system boot from a peripheral drive (USB, DVD, etc.).

The use of anti-malware software for deleting the 'Cyber Command of Oregon' Ransomware also is highly recommended. The 'Cyber Command of Oregon' Ransomware and other members of its family often are associated with infections that consist of multiple PC threats, including, in many cases, backdoor Trojans. They also may utilize memory process-injecting attacks and other techniques that are meant to prevent them from being uninstalled by the PC user.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	U.S.A. Cyber Crime Investigations Cyber Command of Oregon Attention! Your computer has been blocked up for safety reasons listed below. You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of United States of America criminal law. Article 161 of United States Of America criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years. Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of United States of America Criminal Law. Article 148 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine. It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.

Message

U.S.A. Cyber Crime Investigations
Cyber Command of Oregon
Attention! Your computer has been blocked up for safety reasons listed below.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of United States of America criminal law.
Article 161 of United States Of America criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years. Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of United States of America Criminal Law.
Article 148 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.