Hexadecimal (also known as Crypt888) encrypts files, modifies their filenames, changes the desktop wallpaper to display a ransom message, and displays another in a pop-up window (in Korean). It renames encrypted files by prepending "Lock" to filenames. For example, after encryption, Hexadecimal w
StreamsBros hijacks browsers by changing certain settings to streamsbros.com (the address of a fake search engine). Commonly, apps of this type collect information relating to users' browsing habits. Users often download and install browser hijackers unintentionally and, therefore, StreamsBros is
StreamsMob is dubious software categorized as a browser hijacker. It operates by modifying browsers to promote streamsmob.com (a bogus search engine). Most browser hijackers have data tracking capabilities, which are used to monitor users' browsing activity - it is highly likely that StreamsMob al
Belonging to the Snatch ransomware family, Fxmwtv encrypts files, changes their filenames and creates a ransom message. It renames encrypted files by appending the ".fxmwtv" extension to filenames. For example, it would rename a file called "1.jpg" to "1.jpg.fxmwtv", "2.jpg" to "2.jpg.fxmwtv", and
Discovered by dnwls0719, Secure (Sorena) is a ransomware-type program. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all compromised files are appended with ".Id-[random_string].secure". For example, a
Eco Search browser hijacker is designed to promote the ecosearch.club address (fake search engine) by changing some of the browser settings and collect browsing-related information. It is common that users download and install browser hijackers unintentionally, therefore, apps of this type are cat
Eknkfwovyzb is malicious software belonging to the Snatch ransomware family. This malware operates by encrypting data and demanding payment for decryption. During the encryption process, all compromised files are appended with the ".eknkfwovyzb" extension. For example, a file originally named "1.
This screen locker was discovered by xiaopao. BlackKnight2020 is malware that prevents victims from using the infected computer by locking the screen. It also displays a ransom message with instructions about how to pay for the code, which will supposedly unlock the screen. After installati
Discovered by MalwareHunterTeam, Strong is a malicious program categorized as ransomware. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are appended with "Drheshi@protonmail.com.[ran
PromoteOptimization is designed to serve advertisements, collect sensitive information, and promote z6airr.com and adjustablesample.com (addresses of fake search engines) by changing certain browser settings. In this way, it functions as adware and a browser hijacker. In most cases, users downl