First discovered by malware researcher Jakub Kroustek and belonging to the Dharma ransomware family, .good is high-risk ransomware that stealthily infiltrates computers and encrypts most stored files. This ransomware also appends filenames with the ".good" extension (hence its name) during encrypt
up-date[.]to is a rogue website designed to deliver dubious content and promote various applications. It shares many similarities with dozens of other rogue sites, such as rabsirolcalat.info, gatonsenropha.info, and tinhowsinutha.pro. Users typically visit up-date[.]to inadvertently - they are re
gosearchsafely.com is one of many fake search engines promoted through browser hijackers that change browser settings. In this case, gosearchsafely.com is promoted via the Private Browsing by Safely potentially unwanted application (PUA). This PUA is used to promote another fake search engine, se
The SppExtComObjHook.dll file is associated with various illegal software activation tools such as KMSPico, AutoKMS, Re-Loader, and KMSAuto. These tools active Microsoft Windows or Office products without requiring payment. Typically, anti-virus or anti-spyware suites detect the SppExtComObjHook.
Discovered by Michael Gillespie, Rectot is a malicious program belonging to the Djvu ransomware family. Cyber criminals (the developers) use the program to extort money from people. When Rectot is installed on a computer, it encrypts stored data and prevents victims from accessing their files unl
rabsirolcalat[.]info is a rogue website that shares similarities with knowwoow.com, tinhowsinutha.pro, feenotifyfriends.info, and dozens of others. It causes unwanted redirects to other rogue websites and delivers dubious content. Users often visit websites such as rabsirolcalat[.]info inadverten
Shipment Tracker is a deceptive application that supposedly allows users to track their package delivery statuses. Judging on appearance alone, this app may seem legitimate and useful, however, Shipment Tracker is categorized as a potentially unwanted application (PUA) and a browser hijacker, sin
HxTsr.exe (Hidden Executable To Sync Remote Servers) is a legitimate file that can be found in Microsoft Windows Operating Systems. This file/process is part of Microsoft Outlook, a MS Office product, however, its name might be used by cyber criminals to disguise their malicious programs. Therefor
secoh-qad.exe is a file associated with KMSPico, a tool that activates Windows Operating Systems and Microsoft Office suites, thereby illegally bypassing software activation free of charge. If this tool is used when installed anti-virus software is enabled, the security software will detect the se
gatonsenropha[.]info is yet another rogue website designed to redirect visitors to other untrustworthy websites and deliver dubious content. It is virtually identical to knowwoow.com, tinhowsinutha.pro, androponhowrow.info, and dozens of other sites. Many users visit gatonsenropha[.]info inadvert