MME encrypts files and appends the ".MME" extension to their filenames (for example, it renames "1.jpg" to "1.jpg.MME", "2.jpg" to "2.jpg.MME"). MME also creates the "Read_Me.txt" file (a ransom note) containing instructions on how to contact the attackers. Screenshot of a message encouraging
TopADSBlockSearch is a rogue browser extension. It modifies browsers and promotes the topadsblock.com fake search engine; due to this - it is categorized as a browser hijacker. Furthermore, the questionable methods used to distribute browser hijackers also classify them as PUAs (Potentially Unwant
The purpose of stream-best-vid[.]com page is to get permission to show notifications and promote questionable websites. There are hundreds of pages like stream-best-vid[.]com (for example, financesurvey24[.]top, emoxan[.]xyz, arfanbajt[.]xyz). Users open them unintentionally. Stream-best-v
Yt5s[.]com is a rogue website allowing users to download audio and/or video from YouTube. Sites of this type infringe copyright laws; however, they also pose threats to their visitors. Yt5s[.]com employs rogue advertising networks, through which it promotes various untrustworthy and malicious webs
Win 10 Tweaker is a questionable Windows customization tool. Multiple antivirus scanners on VirusTotal detect the installer for Win 10 Tweaker as malicious. Therefore, it is strongly recommended not to trust this program. It is very likely that Win 10 Tweaker is promoted using questionable downloa
Supersuso is a ransomware-type program. It is designed to encrypt data (lock files) and demand payment for the decryption. During the encryption process, files are appended with the ".ICQ_SUPERSUSO" extension. For example, a file like "1.jpg" would appear as something similar to "1.jpg.ICQ_SUPERS
Onlymp3[.]net converts YouTube videos to MP3 audio files. Onlymp3[.]net also uses rogue advertising networks - it promotes questionable websites by opening them in a new tab. It is worthwhile to mention that it is against the terms and conditions of Youtube to download videos from this platform.
ArchivesTransation is a rogue app classified as adware. It also has browser hijacker traits. Since most users inadvertently download/install software products within these classifications, they are also deemed to be PUAs (Potentially Unwanted Applications). Adware enables the placement o
REAL is malware that encrypts files, modifies their filenames, and creates a ransom (the "ReadIt.txt" file). It renames files by appending the victim's ID, emmagaller@mailfence.com email address, and the ".REAL" extension (for example, it renames "sample.jpg" to "sample.jpg.+Id(045AEBC7) mail(Emma
TabMemoryOptimizer is a rogue browser extension supposedly capable of improving system performance by suspending opened browser tabs from running. Instead, this piece of software operates as adware. Since most users unintentionally download/install adware-type products, they are also categorized a