*.thor is a new variant of Locky ransomware. Developers spread this ransomware via spam emails. Following infiltration, *.thor encrypts various files using asymmetric cryptography. During encryption, this ransomware renames files using the "[8_random_characters]-[4_random_characters]-[4_random_ch
*.shit is a new variant of Locky ransomware that is distributed using spam emails. The emails contain malicious files (JS/WSF/HTA) that download an encrypted DLL file, decrypt, and execute it. The file downloads the ransomware. Once infiltrated, the virus will encrypt hundreds of file types. Encr
"Please complete a quick survey to continue" is a ransomware infection that locks computer users' desktops. This is an attempt to coerce users into completing online surveys in order to unlock their computers. Ransomware infections of this type are relatively recent - previous variants exploited
searchoko.com is a fake Internet search engine identical to videobah.com, searchudak.com, worldonsearch.com, and many others. By falsely claiming to generate improved search results, searchoko.com often tricks users into believing that it is a legitimate and useful website. Be aware, however, tha
CIA Election AntiCheat Control - 2016 is ransomware-type malware that locks the computer screen and demands a payment. It is stated that the CIA (Central Intelligence Agency) and FBI (Federal Bureau of Investigation) is monitoring 2016 USA presidential election voting and that the victim must pay
Lock93 is a ransomware-type virus that encrypts files and appends the name of each with a ".lock93" extension (e.g., "sample.jpg" is renamed to "sample.jpg.lock93"). Following encryption, Lock93 opens a pop-up window with a ransom-demand message. The message in (Russian and English) states tha
ANGRY DUCK is a ransomware-type virus that encrypts files using AES-512 cryptography. During encryption, ANGRY DUCK appends the names of encrypted files with a ".adk" extension. For example, "sample.jpg" is renamed to "sample.jpg.adk". Following successful encryption, ANGRY DUCK also changes the d
Anubis is ransomware (based on EDA2) that infiltrates systems and encrypts files. During encryption, Anubis appends a ".coded" extension to the name of each encrypted file. For example, "sample.jpg" is renamed to "sample.jpg.coded". Following successful encryption, Anubis modifies the desktop bac
search.conduit.com is a fake Internet search engine developed by ClientConnect Ltd. Developers claim that search.conduit.com significantly enhances the Internet browsing experience by generating improved search results. These false claims often trick users into believing that search.conduit.com
search.wharkike.com is a fake Internet search engine that falsely claims to the improve web browsing experience by generating the most relevant search results. Many users believe that search.wharkike.com is legitimate and useful, however, this fake search engine monitor users' Internet browsing