Coronavirus is a part of Scarab, a family of ransomware programs. It encrypts files and modifies their filenames, changes the desktop wallpaper and creates other ransom messages in text files, and disables Task Manager. Coronavirus renames files by appending the ".coronavirus" extension. For exam
The QuericsSearch browser hijacker promotes search.querics.net by changing certain browser settings. In this way, the app hijacks browsers to promote a fake search engine. Furthermore, this app adds the "Managed by your organization" feature to Google Chrome browsers and might also be designed to
My Sweeps Tab is a rogue application categorized as a browser hijacker. It operates by making alterations to browser settings to promote hmysweepstab.com (a fake search engine). This app also monitors users' browsing habits. Due to the methods used to distribute My Sweeps Tab, most people downloa
"Windows firewall has blocked some features of this program" is a deceptive pop-up window displayed by untrusted websites. It is disguised as a genuine Windows error message. The purpose of this scam is to trick people into calling a bogus technical support helpline. Trusting this fake alert can
Bomba is malicious software belonging to the Scarab ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, all affected flies are appended with the ".bomba" extension. For examp
iMacCleaner is advertised as a software which improves computer performance by cleaning unwanted files and the browser cache, and uninstalling unwanted software. In fact, this app is categorized as a potentially unwanted application (PUA) due to the method that developers use to distribute it:
RecognitionAssist is a potentially unwanted application (PUA) designed to operate both as a browser hijacker and adware. It changes certain browser settings to the address of a fake search engine and feeds users with advertisements. This app promotes the Safe Finder web page by opening it via ak
SIGARETA is a malicious program belonging to the NEFILIM ransomware family. This particular ransomware infection was discovered by GrujaRS. Typically, malware of this type encrypts files, modifies filenames, and creates and/or displays ransom messages. SIGARETA renames encrypted files by appendin
Discovered by Amigo-A, Enced (also known as PedoFinder/PedoTrap ransomware) is a ransomware-type malicious program. Typically, malware classified as ransomware encrypts data and demands payment for decryption tools. At the time of research, however, Enced did not encrypt the data of infected syste
Sdkkxbh is a part of the Snatch ransomware family and was discovered by Joakim Kennedy. Like most programs of this type, this ransomware encrypts files, modifies filenames and provides victims with instructions about how to contact the developers through a ransom message. Sdkkxbh renames encrypte