First discovered by MalwareHunterTeam, XiaoBa is a ransomware-type virus that stealthily infiltrates systems and encrypts stored files. During encryption, XiaoBa appends filenames with the ".Encrypted[BaYuCheng@yeah.net].XiaBa" extension (e.g., "sample.jpg" is renamed to "sample.jpg.Encrypted[BaYu
"Windows Product Key Expired" is another fake error similar to Google Security Warning, Cydoor Spyware, Internet Security Alert, and many others. This error is displayed by a malicious website that users often visit inadvertently - they are redirected by various PUPs (potentially unwanted progra
One System Care is presented as an application that helps to clean computer systems of various junk files - "OneSystemCare fully cares for your laptop and computer to protect it from unnecessary junk files and recurring issues by thoroughly scanning and inspecting its many components." This func
Identical to go.bonefreeze.com, and a number of others sites, go.mennythanks.com is a fake web search engine that, according to the developers, enhances the browsing experience by generating improved results. Judging on appearance alone, go.mennythanks.com may seem similar to Google, Bing, Yahoo,
Similar in many ways to billmscurlrev.com, questionfly.com, popunderzone.com, and many others, junbi-tracker.com is a rogue website designed to redirect users to various other deceptive sites. In most cases, users visit junbi-tracker.com inadvertently - they are redirected to it by potentially un
jumpers.mobi is a rogue website that is identical to many other sites (such as nametraff.com, thesterminator.com, and celeryleek.com) of this type. These sites redirect from one rogue site to another. Users are likely to to visit jumpers.mobi inadvertently - they are redirected by potentially unw
incluster.com is another rogue website (similar to dealclicks.us, goldoffer.online, redirecting.zone, and many more) that redirects to various other dubious/suspicious websites. Users are often redirected to these websites by potentially unwanted programs (PUPs) or intrusive ads that are displaye
Identical to other sites (such as allbest.mobi, bestabid.com, and securecould-dl.com), hyptas.com is a rogue website that redirects to other dubious and potentially malicious websites. In most cases, users arrive at hyptas.com inadvertently - probably via potentially unwanted programs (PUPs) or i
greatene.com is a rogue website similar to toroadavdertisingmedia.com, smartoffer.site, adskpak.com and many others of this type that redirect to other (potentially malicious) websites. In most cases, users visit these sites inadvertently - they are redirected by intrusive advertisements or poten
DjvuApp (also known as WniDjView) is an open-source application that allows users to view the DjVu file format. This app is legitimate and useful, however, cyber criminals inject DjvuApp's source code with malicious scripts. Therefore, some variants of this application are categorized as adware a