Urausy Ransomware

Posted: October 3, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	26

First Seen:	October 3, 2012
Last Seen:	March 16, 2023
OS(es) Affected:	Windows

Like the similar ransomware Trojan ULocker, Urausy is a variant of police ransomware that first appeared in July of 2012. Urausy also shares ULocker's multi-linguistic acrobatics, since Urausy has been confirmed to be able to create pop-up alerts in many languages that are used throughout Europe. After being installed (often by a related Trojan downloader), Urausy displays a screen-wide pop-up alert that claims to be a notice from an 'e-crime' police unit or other police agency. This alert accuses your PC of being involved in illegal file-trafficking activities and says that you're in danger of facing serious legal penalties unless you pay a corresponding fine. However, Urausy isn't related to any form of police agency, and SpywareRemove.com malware researchers can gladly confirm that ignoring Urausy's warnings will not get you thrown in jail. Instead of paying the illegal fine that Urausy suggests, you should consider removing Urausy with an anti-malware program of your preference.

Why You Need to Ignore these Cops If They Come Calling

Urausy is easily-detected due to its very visible pop-up warning, which blocks your OS interface while Urausy prevents you from using other applications. The contents of this pop-up are variable, and have been seen using languages ranging from English to Polish, with an emphasis on targeting potential victims in Europe. However, all Urausy pop-ups contain common elements, such as:

References to a (real or fake) police organization.
Accusations of your PC's involvement with online crimes such as downloading music or viewing banned forms of adult content.
Requests that you pay a fine via Ukash or Paysafecard, complete with brand logos for the relevant services. This fine usually is expressed in Euros of up to one hundred.
Threats of additional fines or imprisonment if you fail to comply with Urausy's original fine.</li

Urausy may also display your IP address to enhance the appearance of your computer being identified by legal authorities, although SpywareRemove.com malware experts have found that Urausy's only use for your IP address is to use it in determining an appropriate pop-up scam for your country of residence. Since Urausy is considered a very harmful threat to your PC and doesn't have any legal legitimacy to stand on, Urausy's requests for money should be disregarded utterly.

Browbeating a Urausy Ransomer Into Submission

Since Urausy-based threats from 'Specialist Crime Directorates' and similar entities can be ignored safely, you should consider removing Urausy as soon as you're able to do so. Police Ransomware and other PC threats similar to Urausy tend to make Registry-based security changes that can also make your computer vulnerable to other attacks.

If your PC is able to boot into Safe Mode, SpywareRemove.com malware experts recommend that environment to use for anti-malware scans for deleting Urausy. If Urausy disables Safe Mode or blocks your anti-malware scans, you should consider loading a separate OS – which typically can be made available in the form of a USB thumb drive. After removing Urausy, you should verify that all of your Windows settings have also been returned to normal – including your firewall, admin access privileges and other features that are strongly linked to proper PC security.

Urausy Ransomware

Threat Metric

Why You Need to Ignore these Cops If They Come Calling

Browbeating a Urausy Ransomer Into Submission

Related Posts

Leave a Reply