Monthly Archives: February 2018

Mobef-salam Ransomware

Mobef-salam Ransomware is a malicious file-enciphering program that may lock your private files and leave a ransom note called READ.4YOU. Our researchers at Anti-spyware-101.com say the malware is a bit different from other ransomware applications we usually encounter since it does not append any second extension at the end of enciphered files’ titles. Therefore, to realize which documents, photos, pictures, and so on are encrypted the user has to try opening them. Obviously, encrypted files are the ones you cannot launch. The only way to restore them is with a particular decryption tool and a unique decryption key, but sadly both of them are available only to the malware’s developers. On the other hand, if you backed your data, you should be able to recover it with no trouble. Just before, transferring backup copies or new files on the infected computer, we would recommend erasing Mobef-salam Ransomware for safety precautions. This you can do while looking at the instructions available below or with a legitimate antimalware tool. Read more »

myTV Search Plus Extension

myTV Search Plus Extension

The myTV Search Plus extension is a search tool for the Chrome browser aimed at providing users with access to TV channels’ content and the latest updates. However, in reality the application enables user to search games using the search engine super.cantstopplaying.com/search/. Like many other browser extensions, the myTV Search Plus extension is supposed to enhance user experience; however, many computer users may find this search tool redundant and may want to remove it from their computers. Malware researchers encourage affected users to do so, because the extension is capable of changing browser settings to monitor users’ online preferences and record data on various websites.

The myTV Search Plus extension falls to the category of potentially unwanted program (PUPs), which include programs that are promoted on official websites that might not arouse any suspicion, but are spread in dubious ways. Read more »

Saturn Ransomware

Saturn Ransomware

Saturn Ransomware is a ransomware-as-a-service infection that was customized to fit the needs of its distributors. The program will trick you into installing it on your system, and then it will encrypt most of your files. That will be done to terrorize you into paying a ransom fee that should “release” the encrypted data. However, computer security experts would tell you that paying the ransom would not solve your problems. The thing you should definitely do right now is remove Saturn Ransomware for good. Deleting this infection is not that complicated, but there is always a chance that you will have to give up on your files. Read more »

Search.snowballsam.com

Search.snowballsam.com

Search.snowballsam.com is a browser hijacker that can replace the default search provider on the Google Chrome web browser. According to our researchers at Anti-Spyware-101.com, the hijacker should be introduced to users using the Snowball Sam Search extension. If this extension does not exist on your browser, you need to check for any other unfamiliar add-on, application, or program. If you cannot identify the threat on your own, utilize a legitimate malware scanner to help you figure this out. Hopefully, no other threat is found; however, if you learn about malicious infections, you need to delete them as soon as possible. Note that you probably can find guides that discuss the threats you are dealing and their elimination on this site. If you cannot find what you are looking for, do not hesitate to leave a comment below. For now, we need to discuss the removal of Search.snowballsam.com. Even though it might not seem like a threat, it can be very malicious, and it is crucial that you eliminate it right away. Read more »

Weather Reports New Tab

Weather Reports New Tab falls under the classification of potentially unwanted programs. It means keeping it installed could be a bad idea. We do not say the extension might be malicious, but unfortunately, we cannot say it is trustworthy either. The main problem is, the application might place a questionable search engine that may inject search results with additional advertisements from the third party. Interaction with them could put your system at risk, which is why we do not recommend installing such a tool. Naturally, if you already did, we would suggest erasing Weather Reports New Tab manually while following the steps available at the end of this text or with a legitimate antimalware tool you trust. As for more information about the potentially unwanted program, you should continue reading our report. Users who have more questions related to the extension can also leave comments below. Read more »

goPhotoz Start

goPhotoz Start

If your default search tool has been changed to http://photoz.searchalgo.com unexpectedly, you should check all active extensions because goPhotoz Start is the Google Chrome browser extension promoting this page. If you can find it listed next to other extensions, it means that it is the one responsible for altering your browser’s settings. According to specialists, some users install this piece of software on their computers themselves because it promises that users who install it could search, view, and share free photos with friends. In addition, users are told that their web searching experience will be considerably improved as well. Of course, not all users install this piece of software consciously. goPhotoz Start is the most popular in India, the U.S, Angola, Indonesia, and Egypt, and we are sure some users living there could not explain why they have goPhotoz Start installed on their computers. If you have discovered it installed on your system as well, you should know that it is another potentially unwanted application. As a consequence, keeping it active is not what we recommend for users. Do not worry; you could get rid of this potentially unwanted program quite easily. No, you will not remove it through Control Panel, but you could erase it through the add-ons manager. If this tells you nothing, continue reading this report. If you still have questions after reading it, feel free to leave them in the comment box at the bottom of the page. Read more »

Thanatos Ransomware

Thanatos Ransomware

If you find out that Thanatos Ransomware has managed to slither onto your computer, you may have to say goodbye to all your important files. This ransomware can encrypt your files and demand a ransom fee from you so that you can get the decryption key. Our malware specialists at anti-spyware-101.com say that based on the amount of the ransom as well as the e-mail address used, these cyber criminals might come from Russia even though the name of this threat is Greek for "death." Of course, all this could be a diversion so we cannot really confirm this. It seems that your encrypted files might be decryptable and you can find information about it on the web. However, if you are not an advanced computer user, we do not advise you to try to search for such information or free decryption toll, either, because it is not without risk. Hopefully, you have a backup of your important files so that you can use clean files to recover them. If not, this may be a good time to start saving a backup if you do not want to lose files again. We do not advise you to pay the ransom. We strongly recommend that you remove Thanatos Ransomware from your computer immediately. Read more »

Driedsister Ransomware

Driedsister Ransomware

Driedsister Ransomware is a new danger that mostly threatens Japanese computer users. This ransomware can crawl onto your computer and encrypt all your documents and photos in no time. Just because these attackers mainly target Japanese users, it does not meant that this threat cannot infect elsewhere as well. Its original name is "下 物 妹" (“Irisimo imoto”). This dangerous malware infection has one strange feature: It does not demand a ransom fee. It does display a sort of ransom note, but there is no mention of a ransom or that you could get a decryption tool or the key in any way. This also means that right now it is not possible to recover your files that have been encrypted by this ransomware program. Our malware specialists at anti-spyware-101.com say that it is still essential that you remove Driedsister Ransomware if you want to be able to use your computer. Please read on to learn more about this severe threat. Read more »

Russenger Ransomware

Russenger Ransomware

Cyber criminals are exploiting security vulnerabilities and backdoors to spread yet another file-encrypting infection, and it is called Russenger Ransomware. It is not known how exactly this malicious threat spreads, and that, in part, might be due to the fact that different methods could be employed. Hopefully, you can take care of your virtual security to ensure that this dangerous threat cannot slither in. You can do that by installing trustworthy security software. It is also important that you are cautious yourself. For example, many victims let in ransomware by opening corrupted spam email attachments. Random links and files could be used to distribute malware. It could also be concealed as beneficial software, and could be spread using attractive software bundles. Hopefully, you still have time to keep this malware away. If your operating system was already corrupted, undoubtedly, you want to remove Russenger Ransomware as soon as possible. The bad news is that your files will not be decrypted after you delete the malware. Keep reading if you want to learn more about this malicious threat. Read more »

Video Search – Advanced Movie Finder

Video Search – Advanced Movie Finder

Video Search – Advanced Movie Finder is a browser extension that gives you access to videos, movies, and clips. The extension adds its button to the Chrome browser so that you can have its search at your fingertips and use it is with ease. However, the seemingly useful video search tool is categorized as a potentially unwanted program (PUP), and, hence, is removed by certain malware and spyware prevention tools. Read more »