Berta is a dedicated malware researcher, dreaming for a more secure cyber space. Her fascination with IT security began a few years ago when a malware locked her out of her own computer.
Trustedsurf(.)com is a page of a browser hijacker. It commonly uses automatic redirects to Snap(.)do, if you don’t use the search service. Everything you type is redirected to that search engine. Both hijackers are connected to Resoft. To remove the…
Search.lunaticake(.)com is the search page of a browser hijacker called Lunaticake. To remove everything related, you should carefully read this article. Lunaticake can change the homepage, new tab and search engine of browsers. Redirects are not excluded. Search results might…
Hohosearch(.)com is the main page of a browser hijacker. To remove it with all of its files, you should read this article carefully. The hijacker can change the homepage, new tab and search engine of most browsers. You might be…
Websites using the Magento platform have been hit by ransomware. Once infected, the sites are deemed unusable. The ransomware is called KimcilWare and encrypts webserver files. After encryption, it adds its index file on victim servers that can be viewed…
TubeBox(.)org is the site of an adware. The adware shows advertisements, like pop-ups and message boxes when browsing. To remove this adware, you should read the article till the end. A browser add-on that can cause redirects may get in…
Update! Research indicates that current versions of PowerWare append the .locky file extension to the victim’s encrypted files, drop the same ransom notes as Locky, and even use the same graphics and phrases on their ransom payment site. The good…
Update! A researcher from Heise Security, Fabian Scherschel gave an analysis report of the ransomware, in German. In there it is written that the first phase encryption used by Petya is a simple set value XOR of the Master Boot…
Chumsearch.com is a browser hijacker. To remove Chumsearch.com along with everything about it, you should carefully read this article. The ChumSearch hijacker could change the homepage, new tab and search engine of your browsers. You could be redirected as well.…
Update! Apparently, a new variant of this ransomware has been spotted in the wild. The new variant bears the name of Rush ransomware and encrypts files with a .crashed extension. For more detailed information, take a closer look at the…
HDworldz(.)com is the online address of an adware. The adware displays various advertisements, like pop-ups and message boxes. The site offers a registration form. The final step of the registration requires payment. You are promised access to games, movies, and…
Search2.searchwms(.)com is the latest browser hijacker made by SaferBrowser. To remove this hijacker and everything connected to it, you should read this article till the end. The unwanted program can modify settings such as the search engine, homepage, and new…
ConsumerInput(.)com is the web address of an adware. The adware is also known as Consumer Input Panel. Various advertisements about it are being spread, promoting online surveys. The site claims to offer rewards for the surveys. To remove everything related…
What Is FromDocToPDF? A known unwanted program and toolbar created by the Mindspark Interactive Network has re-emerged on the Web. FromDocToPDF.com is the main download page for a browser hijacker of the same name. The updated version of the program…
A new ransomware has emerged. Its name is Crysis, and it sets the extension .CrySiS to encrypted files. RSA algorithm and AES ciphers are combined for the encryption process. The ransom note is set as a picture on the desktop…
Search(.)pch(.)com is a browser hijacker that also goes by the name PCHSearch&Win. To remove this application and everything about it, you should read this article. The hijacker may change the homepage, search engine, and new tab of all of your…
Triangulum(.)com is the domain of an adware spreading various advertisements. An application associated with Triangulum may be spreading the same advertisements. To remove the intrusive ads, keep reading read until the end of the article. Also, don’t forget that the…
Www(.)iLotto(.)com is the web address of an adware. An application called iLotto distributes the same advertisements. To remove them, you should read the article to its end. Advertisements of different kinds may be shown in your browsers. The adware could…
Search-eyes(.)tk is a browser hijacker. To remove this unwanted program and everything connected to it, you should read this article, carefully. The hijacker can modify the new tab page, homepage, bookmarks, and the search engine of your browsers. You can…
Live(.)safesystemupdate(.)online is a malicious web domain causing redirects. To know how to remove the redirects, you should carefully read the whole article. The redirects can take you to ad-supported sites or ones for online shopping. You could also get redirected…
Uppersearch(.)tk is a browser hijacker. To remove this unwanted application and everything associated with it, you should read the article till its end. The hijacker can make modifications to the search engine, homepage, bookmarks and new tab page of your…
