The LookupConsole app is part of the AdLoad adware family. Typically, adware-type applications feed users with various advertisements and often gather information. As well as operating as adware, LookupConsole is a browser hijacker - this app promotes the address of a fake search engine by chang
RollingSearch (also known as Rolling Search) is software categorized as a browser hijacker. Typically, these hijackers are promoted as improving the browsing experience by providing accurate search results and quick access to various services or content. RollingSearch operates by modifying browse
Discovered by Jirehlov Solace, Vhd is ransomware. Typically, software of this type is designed to encrypt victims files, rename them and create or display ransom messages. This ransomware renames encrypted files by appending the ".vhd" extension to filenames. For example, it renames "1.jpg" to "1
Radio Hub Online is a browser hijacker endorsed as providing easy access to live radio streaming services. In fact, this rogue software modifies browsers, promotes a fake search engine (radiohubonline.com), and tracks browsing-related data. Since most users install Radio Hub Online unintentionally
Discovered by dnwls0719, UPPER is a ransomware-type malicious program. It operates by encrypting data and demanding payment for decryption. When this ransomware encrypts, all affected files are appended with the ".UPPER" extension. For example, a file such as "1.jpg" would appear as "1.jpg.UPPER"
Like many other adware-type apps, CommonBrand supposedly improves the browsing experience and/or delivers various features. In fact, it serves intrusive advertisements and gathers information. Furthermore, it promotes the Safe Finder website by opening it through akamaihd.net. Apps such as Comm
Discovered by Jakub Kroustek, C-VIR is malicious software belonging to the Dharma ransomware family. Typically, software of this type encrypts files, changes their filenames and creates and/or displays ransom messages. C-VIR renames encrypted files by adding the victim's ID, coronavirus@foxmail.co
Quick Photo Editor is a rogue application supposedly capable of providing easy access to various free photo editing services. It makes modifications to browser settings to promote search.hquickphotoeditor.com (a fake search engine). Therefore, this app is classified as a browser hijacker. Further
Discovered by dnwls0719, Waldo is a malicious program classified as ransomware. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption tools/software. During the encryption process, filenames of affected files are typically appended with an ext
There are many fake search engines on the internet. In most cases, they are promoted through potentially unwanted applications (PUAs), browser hijackers. Note that vmos.xyz is the address of a fake search engine, which is promoted through PUAs named SApp+ and Ext Apps. It is possible that other b