Discovered by xiaopao, Clay encrypts files and provides instructions about how to pay a ransom, contact the developers, and various other details. Unlike other malware of this type, Clay does not rename encrypted files or append any extension to the compromised filenames, however, it displays a ra
PromoteQueue is a rogue application classified as adware and also possessing browser hijacker traits. Following successful infiltration, PromoteQueue runs intrusive ad campaigns and makes modifications to browser settings to promote fake search engines. Most adware-type apps and browser hijacke
LiveSportSearch hijacks browsers by changing certain settings to livesportsearch.com (the address of a fake search engine). This browser hijacker also collects browsing-related information. Frequently, users download and install apps such as LiveSportSearch inadvertently and, therefore, they are c
TG33 is malicious software belonging to the Matrix ransomware family. It is designed to encrypt data and demand ransoms for decryption. During the encryption process, all affected files are renamed following this pattern: "[TomGate33@criptext.com].[random_string].TG33", which consists of the cybe
YUFL is designed to block access to files by encrypting them. It also changes the filenames and issues two ransom messages. It renames files by adding the victim's ID, the yourfiles1@tuta.io email address, and appending ".YUFL" to the extension. For example, "1.jpg" is renamed to "1.jpg.id-C279F2
DivisionIndexer serves advertisements and promotes a fake search engine (its address). Therefore, it functions not only as adware but also as a browser hijacker. Moreover, it is very likely that DivisionIndexer collects browsing data and/or other information as well. Typically, users do not dow
PC Accelerate is a piece of software, endorsed as a tool for optimizing operating systems. It is supposedly capable of creating backup files, updating old registry files, eliminating errors, and so on. It is deemed to be a PUA (Potentially Unwanted Application), due to the dubious techniques used
Searches.network is the address of a fake search engine. Typically, when users see such address in the settings of a web browser/they end up on that address on certain occasions, then it means that a browser has some browser hijacker installed on it. In most cases users download and install brows
PCRepairClinic is a piece of untrustworthy software, promoted as a tool capable of cleaning and optimizing systems, by fixing and removing various errors. However, dubious techniques are used to distribute this application, hence most users download/install it unintentionally. Due to this, it is
Cliptomaner is the name of a cryptocurrency miner which uses XMRig to mine Monero. It is known that is written in the AutoIT scripting language and distributed via the installer which is disguised as the installer for Realtek audio equipment. Cliptomaner is designed not only to mine cryptocurrency