WCry (also known as WannaCry or WannaCryptor) is a ransomware which encrypts your files, changes their extensions to .WCRY, .WNCRY and .WNCRYT and asks for a BitCoin payment. It forces you to buy a software called Wanna Decryptor as otherwise the files would be lost. It first appeared on February 2017 but has been updated and now…
Salsa (Salsa222) is a ransomware virus which encrypts your files and asks for a BitCoin payment in order to restore them. The desktop background is changed to a black image saying “SALSA PERSONAL FILES ENCRYPTED“, files receive a “.salsa222” extension and a ransom note is being constantly opened automatically. The ransomware operates similarly to other viruses…
Attirerpage.com is a browser hijacker which modifies your browser settings and program shortcuts to make itself your default homepage and search engine. It also redirects to other websites and might display unwanted advertisements. While it may look like attirerpage.com is a legitimate search engine it is actually just a fake page which redirects your queries…
Searchalgo.com browser hijacker changes your browser settings so that it would open an unwanted homepage upon launch. The adware also forces you to use its own search engine. There are several variations of this unwanted program which might display different websites, for example: movixhub.searchalgo.com, search.searchalgo.com or simply searchalgo.com. All these websites are identical and only the subdomains are different. In…
Chromesearch1.info is an adware program which hijacks your browser and starts displaying unwanted homepage and search engine. It is designed to look like a legitimate search engine but in reality is just a parasite with no functionality. The only purpose of this hijacker is to earn money to its creators by displaying unwanted advertisements, redirecting…
Matrix is a ransomware virus which encrypts your files and makes them impossible to open. It then demands for a BitCoin payment and gives a limited amount of time to do so. This virus has been updated several times and comes back in different forms with each version. Currently it is known to change encrypted files…
Ourluckysites.com is a recently appeared browser hijacker which changes your default homepage and starts displaying unwanted website. It pretends to be a legitimate search engine but is actually a parasite with no real functionality. The only purpose of this hijacker is to earn money for its creators by displaying unwanted advertisements and sponsored search results….
This ransomware has several names. It may be called AngryKite due to the file it uses to begin the attack (angryKite_v3.exe.bin). It can also be called .NumberDot since it appends such extension to all encrypted files. Finally, you can refer to it as “SYSTEM MAY HAVE FOUND anonymous encryption on your computer” as this is the fake…
InitialSite123.com / InitialPage123.com is a recently launched browser hijacker. If your computer suddenly starts redirecting to this website it means that you have been infected by the adware. The hijacker homepages look identical to hundreds similar ones, most likely launched by the same developers. It has four main “Web, Images, Videos, News” links and a search…
Browser hijacker Trotux.com displays a fake search website as your homepage. It takes control of your browser settings and automatically reverts any changes in order to stay on the system for as long as possible. Trotux does not have any functionality. It may seem like a legitimate search engine, however it simply redirects your queries to Yahoo…