searchred01.xyz is promoted through a potentially unwanted application (PUA), a browser hijacker called Suxs APP. This address might also be promoted by other apps of this type. Typically, browser hijackers promote fake search engines by changing certain browser settings. Most gather browsing-rel
Space is a part of the Dharma ransomware family. It encrypts files, renames them, displays a ransom message in a pop-up window, and creates another in a text file named "FILES ENCRYPTED.txt". Space renames files by adding the victim's ID, the Mail@qbmail.biz email address, and appending the ".spac
!Shadow is malicious software categorized as ransomware. It operates by encrypting the data of infected systems and presenting victims with ransom demands for decryption tools. During the encryption process, all affected files are renamed according to this pattern: "{ShadowofDeath@elude.in}.ID=[v
The main purpose of AdditionalChannelSearch is to serve advertisements, however, it also promotes the address of a fake search engine by modifying browser settings. In summary, AdditionalChannelSearch has characteristics of adware and browser hijackers. Users often download and install apps of
Mint Search is designed to promote find.mintsearch.net (the address of a fake search engine). This app also adds the "Managed by your organization" feature to Google Chrome browsers. Since Mint Search is classified as a browser hijacker, it might also be designed to collect browsing data. Commonl
Discovered by Michael Gillespie, Hex911 is a malicious program classified as ransomware. It is designed to encrypt the data of infected systems and demand payment for decryption. During the encryption process, filenames of affected files are appended with an extension. One variant adds ".hex911 an
sabs-news[.]info is virtually identical to pushcleansystem[.]com, checkvd[.]com, enerativearea[.]pro and many other rogue sites designed to display dubious content or open other rogue web pages. Typically, users do not visit these sites intentionally - they are opened through deceptive ads, untrus
Nlah is a malicious program belonging the to Djvu ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, filenames of affected files are appended with the ".nlah" extension. For
Mongo Search is a browser hijacker. Software within this category operates by making modifications to browser settings to promote fake search engines. Mongo Search promotes browser.mongosearch.net, also a bogus search engine. Mongo Search also adds the "Managed by your organization" feature to Goo
Maps Pro Hub is a rogue application endorsed as a tool for easy access to various maps. In fact, it is categorized as a browser hijacker. This app operates by making changes to browser settings to promote hmapsprohub.com (a bogus search engine). Additionally, it monitors users' browsing activity.