This screen locker was discovered by xiaopao. BlackKnight2020 is malware that prevents victims from using the infected computer by locking the screen. It also displays a ransom message with instructions about how to pay for the code, which will supposedly unlock the screen. After installati
Discovered by MalwareHunterTeam, Strong is a malicious program categorized as ransomware. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are appended with "Drheshi@protonmail.com.[ran
PromoteOptimization is designed to serve advertisements, collect sensitive information, and promote z6airr.com and adjustablesample.com (addresses of fake search engines) by changing certain browser settings. In this way, it functions as adware and a browser hijacker. In most cases, users downl
MessengerTime is a deceptive program that supposedly allows users to read Facebook messages directly from the desktop. The appearance of this application might trick users into believing that MessengerTime is legitimate, however, it is developed by third parties and is not affiliated with Facebook
Geno is a part of the Djvu ransomware family and was discovered by Michael Gillespie. Software categorized as ransomware is used by cyber criminals who attempt to extort money from their victims. Most ransomware-type programs are designed encrypt files and prevent victims from accessing them unles
LeadingServiceSearch is rogue software classified as adware with browser hijacker traits. Following successful installation, this application runs intrusive advertisement campaigns, makes changes to browser settings and promotes fake search engines. Additionally, most adware-type apps and brows
Tkoinprz belongs to the family of ransomware called Snatch. In most cases, malware of this type encrypts files, appends an extension to filenames, and provides instructions about how to contact the developers and pay the ransom. Tkoinprz renames encrypted files by appending the ".tkoinprz" extensi
allfreshposts[.]com is designed to promote bogus websites or load dubious content. There are many other websites of this kind including, for example, thewowfeed[.]com, hipermovies[.]icu, and gdanstum[.]net. Typically, users do not visit these web pages intentionally - they are opened through dece
CORE is a malicious program belonging to the Matrix ransomware family. It is designed to encrypt data and demand payment for decryption. During the encryption process, files are renamed following this pattern: "[BatHelp@protonmail.com].[random_string].CORE", which consists of the cyber criminals'
ANN is part of the Matrix ransomware family. It is designed to rename all encrypted files by changing filenames to the AskHelp@protonmail.com email address, a string of random characters and appending the ".ANN" extension. For example, it would rename a file called "1.jpg" to "[AskHelp@protonmail