Monthly Archives: July 2017

Quakeway Ransomware

It looks like Quakeway Ransomware might be currently inactive, but users may still come across this malicious program. The malware’s sample our researchers at Anti-spyware-101.com tested did not encipher any files located on the computer, although the infection’s shown warning message claimed the complete opposite. However, it does not mean the threat cannot encipher data since the further research revealed it should be capable of doing so. In such case, the encrypted files should be marked with a second extension called .org, e.g. photograph.jpg.org. It seems to us the best course of action after encountering Quakeway Ransomware is removing the malicious program from the system as soon as possible. It would probably be easier to erase it with an antimalware tool, but you can try the manual deletion instructions available below the text too. Read more »

Aubamy Downloader

Aubamy Downloader is an untrustworthy add-on targeted at users who browse with Google Chrome. The extension might be distributed through suspicious pop-up ads found on unreliable web pages. Our researchers report such pop-ups might seem to be difficult to close and users could install the add-on only because they believe it is the only way to leave the entered website. If this is how you received Aubamy Downloader and now you regret adding in onto your browser we encourage you to use the deletion instructions located at the end of the article and eliminate the threat. The program was categorized as a potentially unwanted program, and it does not look like it has any useful features, so we doubt you will miss it. As for more information on the extension, we urge you to read the rest of the report. Read more »

Scorpio Ransomware

Scorpio Ransomware

There are no good things that we can say about a program that goes by the name of Scorpio Ransomware. If you are not intimately familiar with these types of applications, you can consider yourself lucky and should take all possible action to avoid them. That is so because programs classified as ransomware are created for a single purpose - to lock vast amounts of data on the affected operating system. This might have disastrous outcomes if you use your computer for work or otherwise important activities. In some instances, files affected by this malware might be corrupted once and for all. It goes without saying that such functionality cannot be tolerated under any circumstances. To have a full understanding of the intricate inner workings of this malicious program and to learn how you can protect your PC from it, be sure to read our report. Besides all of that, we also present a detailed removal guide that you must use immediately if you already have Scorpio Ransomware up and running on your PC. Read more »

Search.hemailloginnow.com

Search.hemailloginnow.com

Search.hemailloginnow.com is a hijacker that can take over your Mozilla Firefox, Google Chrome, or Internet Explorer browser, most likely, when you install “Email Login Now.” This is a browser extension that is officially represented via emailloginnow.com/Email?, as well as the Chrome web store at chrome.google.com/webstore/detail/email-login-now-v11/mjkcdpcenfkkhlcbfeddiannpeenpilh (only for Chrome users, of course). If you install this add-on from either of these sources, it should be clear that it comes bundled with the hijacker. Unfortunately, there is no option to reject the hijacker, and so some users might be pushed into accepting it without even meaning to. Overall, the extension could be spread via unreliable installers, and users could acquire the hijacker unknowingly. Also, there is always a possibility that it will be spread on its own. Regardless of the situation, Anti-Spyware-101.com research team strongly recommends removing Search.hemailloginnow.com right away. Hopefully, you can get rid of his hijacker by deleting “Email Login Now.” Read more »

Scanfolder Disk

Scanfolder Disk

Scanfolder Disk is a disk optimizer, the supposed goal of which is to help you find duplicate files which can be removed from the computer. Very often users cannot understand why there is so little space on their hard drive, so Scanfolder Disk is said to enable users to find old and unnecessary files that could be replaced by new ones if more space was needed. The seemingly handy program is presented as a tool that can help you free up disk space by scanning all the data and filtering outdated files. But is it all that you really need? Scanfolder Disk has recently been attributed to the category of potentially unwanted programs (PUPs), and this usually happens for a reason. Moreover, PUPs are normally added onto the detection lists of malware prevention programs, which means that they can be removed from computers as well as serious computer threats. Read more »

Blogingt.net

Blogingt.net is a Russian news portal on the front but it is indeed an adware server that malware infections, such as adware programs, may use to redirect you to questionable websites to generate web traffic and thus make money for its creators. It is possible that you will not even see this URL in your browser as the redirection can take place in a matter of a second. Our malware specialists at anti-spyware-101.com have found that this Russian adware server is not even totally new as it is an identical clone of News1free.org, 2infoblog.com, and Browser-net.net. This news portal could be just a “cover story” as we have discovered that the news pieces there are all plagiarized. This page also has a search engine that could present to you modified search results that could pose a threat to your virtual security. All in all, this adware server could put your computer at risk if you do not act right now. We recommend that you remove Blogingt.net from your computer immediately. Read more »

Magala

If you find a new home page featuring a search engine and toolbar from the Mindspark family, chances are Magala has found its way to your system without your knowledge. This is a new malware infection that has been categorized as a Trojan by our malware specialists at anti-spyware-101.com. In fact, this is a so-caller “clicker” that is created to generate false web traffic to certain websites. Somebody does make money out of this, and we are sorry to say but it is not you. Although this Trojan itself may not directly pose a threat to your system, but it may slower your Internet connection and use some system resources as well to be able to operate in the background. Also, it installs a useless toolbar that could actually put your computer at risk by presenting to you questionable third-party content. All in all, we suggest that you remove Magala Trojan from your PC as soon as possible. Read more »

Search.loginemailaccounts.com

Search.loginemailaccounts.com

If the homepage of your Chrome, Firefox, or Internet Explorer browser was suddenly corrupted by the suspicious Search.loginemailaccounts.com, the chances are that an add-on called “Login Email Account” is to blame for that. An official installer for this extension does not exist at this time, but it is likely that it was represented using a unique website and via the Chrome web store. Anti-Spyware-101.com research team informs that this suspicious hijacker can also be distributed via third-party installers that could be shared via filewon.com, filewin.com, malavida.es, and other unreliable file-sharing sites. If this is how the hijacker slithered into your operating system as well, we recommend installing a legitimate malware scanner and performing a full system scan. If any additional infections have invaded your operating system along with the hijacker, you will be informed about them. When it comes to the removal, a few different methods should be discussed. If you want to delete Search.loginemailaccounts.com, keep reading. Read more »

'Windows Firewall Blocked The Internet Due To Security Breach' Pop-Up

If your default browser keeps opening 'Windows Firewall Blocked The Internet Due To Security Breach' Pop-Up on your screen no matter you surf the Internet or not, this might be a sign that an untrustworthy application is active on your computer. Theoretically, users might see this pop-up on their screens also if they end up on a dubious page redirecting to the domain http://savetosupport.online/ containing this disturbing pop-up, but, of course, it is still more likely that malicious software plays a key role here. Specialists working at anti-spyware-101.com suspect that an advertising-supported application (adware) is the one responsible for displaying these pop-ups on users’ screens. If you are among those users who see this disturbing alert, you should know that it is completely fake, and you do not need to do anything about its presence. Well, there is one thing you need to do – find and erase an untrustworthy program from your computer. We do not say that all users’ PCs are infected with malware if they encounter 'Windows Firewall Blocked The Internet Due To Security Breach' Pop-Up – it might be enough to close the browser and do not allow it to restore the previous browsing session in some cases. Read more »

Naampa Ransomware

Naampa Ransomware

We are sure you will not be happy about the entrance of Naampa Ransomware because it is one of those malicious applications that enter computers illegally and then immediately lock users’ files without prior notice. The language used by this infection is Russian, so it is believed that it might target users living in Russian-speaking countries primarily. Of course, it does not mean that you are safe if you do not live in any of these countries. We suspect that you are reading this article because you have already become a victim of this ransomware infection. You should take action immediately if we are right – go to uninstall this infection from your computer as soon as possible because its presence might result in the loss of even more files. Naampa Ransomware drops only two files on compromised machines: the ransom note and the .res file, so its removal should not be a very complicated procedure. Read more »