‘Program Launch [expired license]‘ Ransomware

Posted: August 2, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	68

First Seen:	August 2, 2013
OS(es) Affected:	Windows

The 'Program Launch [expired license]' Ransomware is a ransomware Trojan that displays inaccurate system alerts to encourage illegitimate payments to criminals. These payments may be disguised as transactions to your regional law enforcement agency or other government institution, and the 'Program Launch [expired license]' Ransomware usually will detect fake PC threats on your system as part of its ransom hoax. While the 'Program Launch [expired license]' Ransomware's pop-ups are carefully designed to look like warning messages from legitimate Windows security software, SpywareRemove.com malware experts note that suitable anti-malware programs can confirm the lack of validity to the 'Program Launch [expired license]' Ransomware's warnings and remove the 'Program Launch [expired license]' Ransomware from your computer as it's needed.

The 'Program Launch [expired license]' Ransomware and the Saboteur 'Child' that It Plants to Rile You Up

'Program Launch [expired license]' Ransomware specializes in alerts that are very similar to old versions of Windows Firewall warnings regarding whether or not you want to allow or block a program's network activities. However, instead of creating warnings about legitimate programs, the 'Program Launch [expired license]' Ransomware creates alerts regarding fake programs consisting of randomly-named files that the 'Program Launch [expired license]' Ransomware has placed in arbitrary locations, such as your Temporary Files folder. SpywareRemove.com malware experts note that this attack technique often is favored by other types of PC threats, such as fake anti-malware programs from the WinWebSec family.

By displaying warning messages that make it look like your computer is being obliquely threatened through Java-based malware, the 'Program Launch [expired license]' Ransomware urges you to transfer cash to an unauthorized source to resolve these issues. However, this attack isn't any different from any other scam launched through rogue security products, fake Police Trojans and similar types of malware, and SpywareRemove.com malware researchers don't see any justification for paying the ransom required by the 'Program Launch [expired license]' Ransomware.

Reaching the Expiration Date of the 'Program Launch [expired license]' Ransomware Troubling Your Computer

The 'Program Launch [expired license]' Ransomware's attacks also may include attempts to block you from using other applications or bar you from accessing central Windows features like your desktop. If the 'Program Launch [expired license]' Ransomware keeps you from accessing the anti-malware and related security software best used for removing the 'Program Launch [expired license]' Ransomware safely, SpywareRemove.com malware experts can recommend multiple ways of overcoming this obstacle:

Booting through a removable device, such as a DVD or USB drive, will allow you to use a backup OS that isn't infected with the 'Program Launch [expired license]' Ransomware.
Safe Mode also will let you launch Windows normally, albeit with many programs (including, hopefully, the 'Program Launch [expired license]' Ransomware and other automatically-launching PC threats) disabled.
Lastly, you also may wish to consider using the Command Prompt if you're comfortable with using programs through text commands.

The 'Program Launch [expired license]' Ransomware does not appear to be related to other major types of ransomware currently in circulation, but most likely uses similar infection vectors. Spam links, file attachments from unsafe sources and potentially compromised or malicious website content all should be avoided with appropriate browser security – and a little common sense.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	Program Launch [expired licence] Program java.exe is trying to launch an unregistered program. This may likely be a normal activity. Allow it permanently if you are quite sure ajbibcmgiiewiwntf.exe is a legitimate application otherwise you should block it.