NMoreira is a ransomware-type virus identical to AiraCrop and related to Team XRat. This ransomware infiltrates the system and encrypts files using asymmetric cryptography. During encryption, NMoreira appends names of encrypted files with the ".maktub" extension (this is unrelated to Maktub ransom
sstartbest.ru is a fake Internet search engine identical to search4tops.com, bestsearchs.com, chromepage1.ru, and many others. Judging on appearance alone, sstartbest.ru may seem very similar to Google, Bing, Yahoo, and other legitimate search engines. Therefore, users often believe that sstartbe
"This User Is Disabled" is a fake error displayed by an adware-type application called Power Cam. It was first discovered by Lawrence Abrams. This adware infiltrates the system during installation of other (often free) software. Following successful infiltration, Power Cam locks the computer scree
Windows Session Console Weather is a deceptive application designed by SoftMedia and related to Linkury (a company responsible for the development of SafeFinder browser hijacker). This app infiltrates systems during installation of other (often free) software. Furthermore, Windows Session Console
Vindows is file-encryption ransomware discovered by Jakub Kroustek. Following infiltration, this malware encrypts various stored files and appends filenames with the ".vindows" extension (for instance, "sample.jpg" is renamed to "sample.jpg.vindows"). Vindows then opens a pop-up window containing
WebShields is a deceptive application that supposedly protects users' privacy during Internet browsing. These claims often trick users into believing that that WebShields is legitimate and useful, however, this app often infiltrates systems without consent. Furthermore, WebShields stealthily modi
Identical to webbooks.site, gotowebs.com is a fake Internet search engine claiming to generate improved search results. On initial inspection, this site may seem legitimate and useful, however, it is promoted via rogue software downloaders/installers that hijack web browsers and stealthily modify
SavingsCool is an updated version of MySafeSavings adware. By claiming to save time and money while helping online, SavingsCool attempts to give the impression of legitimacy. Be aware, however, that this app often infiltrates systems without users' consent. Furthermore, it displays intrusive onli
easyopenweb.com is a deceptive website claiming to generate improved search results. Judging on appearance alone, this site barely differs from Google, Bing, Yahoo, and other similar legitimate search engines. Therefore, some users believe that easyopenweb.com is also legitimate. In fact, develop
*.aesir is a new variant of Locky. Apart from minor updates, it is also virtually identical to .odin and *.thor. Developers spread this ransomware via spam emails (malicious attachments). Following infiltration, *.aesir encrypts stored files (targeting 456 file types in total) using asymmetric cry