Berta is a dedicated malware researcher, dreaming for a more secure cyber space. Her fascination with IT security began a few years ago when a malware locked her out of her own computer.
New Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
A ransomware crypto-virus that goes by the name of Mahasaraswati is spreading around the Web. The email left for victims with instructions to pay the ransom is located in India, although the origin of the ransomware and its creator is…
Dozensearch(.)com is a natural browser hijacker. The unwanted software can make various modifications to browser settings like the home page, search engine, and new tab. You could get redirected. When you browse, you may see advertisements. An add-on or extension…
WorldSearchPro.com is a browser hijacker. It is spreading mainly with bundled free programs and the WorldSearchPro.com site. The hijacker also generates ads, shows misleading results and redirects. To remove it along with any unwanted programs and get your settings restored,…
SeginChile is a cryptovirus using an open-source ransomware kit called eda2. What is unique about SeginChile is that the virus does not ask for ransom. The virus will encrypt your files and place .seginchile as an extension. To see how…
Private Search is a search engine which also has an extension of the same name. This program is provided by the site eAnswers.com and considered as a browser hijacker. The search engine takes over your browsers, changes, and blocks their…
Shopper Pro is a platform spreading ads about shopping. These advertisements, are mostly annoying pop-ups, and can redirect you to suspicious websites. Shopper Pro ads might be spotted on different websites because the adware itself generates them. To remove the…
Search.login-help(.)net is the search page of a browser hijacker developed by SaferBrowser. An extension and a toolbar related to the hijacker can be added to your browsers. This application can modify settings such as the home page, search engine, and…
GenieGamer(.)com is the website of the adware gaming platform GenieGamer. The site sends out adverts, mainly as pop-ups, and can redirect you to other similar websites. Every game hosted on the site contains a link to other gaming platforms. To…
StartJoy(.)com is a download page and the main website for an adware and browser hijacker of the same name. A related extension is possible to exist too. Redirects and ads are produced by this adware. If installed, your browsers will…
FindFormsNow(.)com is a website that hosts an extension for a browser hijacker. The extension is of the same name. The site is considered an adware because it generates ads. The extension is a version of the related browser hijacker. This…
IceLotto(.)org is one of the websites of an online gambling platform called IceLotto. The site delivers advertisements, such as pop-ups, and might redirect you to other gambling sites. You can see such ads promoting IceLotto on other websites, as well…
A ransomware crypto-virus called Crypren popped up a couple of days ago. The virus will lock files and append an extension .encrypted to all of them. The ransom money that Crypren demands is around 45 US dollars. To see how…
GamesFlight(.)com is a website for an online gaming platform GamesFlight. The site distributes advertisements, such as pop-ups, and might redirect you to other related sites when browsing. Not only that you can see ads for this site on other web…
Error #268D3 is an error code message that is shown on certain websites. 1-855-712-8551 is the main phone number for this tech support scam. The people behind the fake tech support team could call you from that number or another…
Petya ransomware now spreads with a copy of itself – Mischa. Petya, as before, asks for admin privileges to encrypt the MBR, but now if that fails, Mischa ransomware is loaded, which encrypts files on the infected PC. Considering how…
The CryptoHitman ransomware has a new variant. Now it bears the name CryptoHitman, but its core is more or less the same. Instead of showing the puppet used in the “Saw” movies, the ransomware’s theme now is the Hitman character…
TvNewTab(.)com is a website that both hosts an extension for a browser or redirects to one. The extension is of the same name but is sometimes referred to as TvNewTab(Plus). Redirects and adverts are generated by this adware that also…
TrendingUpNow(.)com is a website that is heavily advertised. On top of that, the site itself offers an adware of the same name. The adware will display advertisements, like pop-ups, and you will get redirected when browsing. A program and a…
A week or so ago, researchers from Proofpoint uncovered their findings of a ransomware they named MM Locker. The ransomware encrypts files with the .locked extension. Rumor has it that some of the infections are caused by crack executables for…
