Home Malware Programs Trojans Trojan:Win32/Ransom.FS

Trojan:Win32/Ransom.FS

Posted: December 20, 2011

Threat Metric

Threat Level: 8/10
Infected PCs: 49
First Seen: December 20, 2011
Last Seen: March 8, 2024
OS(es) Affected: Windows

Trojan:Win32/Ransom.FS is a ransomware Trojan that targets PC users in Switzerland. Trojan:Win32/Ransom.FS displays a window that shields the entire desktop of the infected computer and demands payment for the alleged possession of illegitimate material. Once installed, Trojan:Win32/Ransom.FS adds malicious files and modifies the system registry so that it can automatically run every time you start Windows starts, even if Windows is restarted in Safe Mode. Trojan:Win32/Ransom.FS displays a full-screen image that hides all other windows, making the computer effectively unusable. The image is a bogus warning that pretends to come from a legitimate institution such as the 'Swiss Federal Department of Justice and Police'. It demands the payment of an alleged fine; however, even if the PC user pays, the computer is still left unusable. Trojan:Win32/Ransom.FS queries a legitimate IP address geolocation service to determine the country and the ISP from which the affected computer is connecting to the Internet. Uninstall Trojan:Win32/Ransom.FS before it harms your PC.

Loading...