Monthly Archives: November 2017 - Page 10

Webstart.me

Webstart.me

Finding Webstart.me in your browsers as your new homepage upon launching may give you the feeling that you accidentally pressed the Windows key on your keyboard and ended up on the Metro UI screen. This questionable browser extension practically imitates that screen and offers resembling thumbnail links that are organized around a search box. So this is indeed a search page with features. However, due to certain questionable traits, our malware experts at Anti-Spyware-101.com concluded that this is a potentially unwanted program, or PUP, even though some may call it a browser hijacker. This PUP can actually change your browser settings to appear in them as your homepage and new tab page but it may also modify your default search engine settings. Although this featured search page looks innocent and we cannot really call it a dangerous threat, it can still pose as an indirect threat to your system security. Apart from the fact that this PUP may bring other PUPs and even malware infections onto your system, it may also provide you with potentially unreliable third-party content. But let us explain in more details why we suggest that you remove Webstart.me from your computer. Read more »

Comrade HT Ransomware

Comrade HT Ransomware

Comrade HT Ransomware can sneak onto your system and take all your important files hostage if you were to keep them in default directories, such as Documents, Pictures, and Videos. Our malware experts at Anti-Spyware-101.com say that this is a dangerous ransomware program that you should take seriously since you may lose all the files it encrypts. These villains try to extort hundreds of dollars from you for the decryption key that they are storing on a secret remote server. You have 24 hours to comply, or else, you can lose the key forever. Unfortunately though, there is no guarantee that you will really get the key even if you pay. It is always risky to deal with cyber criminals and you should definitely take this into account before making up your mind and decide on your next move. Hopefully, you have a backup of your files and you can recover them to save you this time. But do not copy those clean files back until you remove Comrade HT Ransomware from your computer. Please read on to learn more about this serious attack so that you can possibly stop the next one. Read more »

Search.mogobiggy.com

A browser hijacker should never be active on your computer. Recently, malware experts working at Anti-Spyware-101.com have discovered one more application that belongs to this category, which goes by the name of Search.mogobiggy.com. During our analysis, it has been discovered that this devious application only affects MAC computers. However, the experience of having a browser hijacker does not differ in regards to what type of system you use. Just like any other application of this classification, it will cause annoyance and frustration every single time you will browse the web. That is so because the intrusive program can make unwanted changes to your browser's default settings without any warning. If that was not enough, you must also be aware of the fact that the suspicious application in question could subject your operating system to questionable and even malicious web content. To learn more about Search.mogobiggy.com and how you can remove it, make sure to read the rest of our article. Read more »

Search.pensirot.com

It looks like Search.pensirot.com is a browser hijacker targeted at MAC computers’ users. If, unfortunately, you noticed this threat on your device, we encourage you to read the rest of our report and learn more about this questionable search engine or perhaps even use the removal instructions located below the article should you choose to get rid of it. The reason our specialists at Anti-spyware-101.com recommend erasing Search.pensirot.com is that there is a chance the application might show you suspicious advertisements coming from unknown third parties. Of course, one could try not to click such ads, but since the tool is not irreplaceable, we believe it would be safer to pick another search engine, for example, google.com and remove this browser hijacker. Read more »

Lordofshadow Ransomware

Cybersecurity experts have recently acquired a sample of a ransomware-type program called Lordofshadow Ransomware and tested it. They found that it is based on Hidden-Tear Ransomware which is so often used a basis for creating ransomware. Lordofshadow Ransomware was designed to encrypt your files and demand that you pay money to get them back. However, you should remove this ransomware instead because your files might not be decrypted after you pay the ransom. For more detailed information on this malicious program, we invite you to read this whole article. Read more »

Pracember

Pracember

Have you been forced into installing Pracember? Our Anti-Spyware-101.com research team has recently discovered that this undesirable extension can be introduced to users in an aggressive manner: Via pop-ups and ads that redirect to a full-screen page. The notification on the page informs that you can leave it only if you install the extension that is offered. This is not the first time an unreliable extension is introduced to users in this manner. In fact, more and more add-ons and applications are spread this way, including Search Bay, Tank Runner, and Toothy. Needless to say, you should never install unfamiliar programs just because you might be out of options. When it comes to installers represented via web pages, you always have the option to terminate the browser via the Task Manager, and if you do not know how to do that, you can restart your computer. If the browser is set up to open the last page visited, you can reinstall the browser. All in all, it is unlikely that you will need to take measures this aggressive, as you should be able to just close the browser. What if the potentially unwanted program is already installed? In this case, we recommend reading this report to learn how to delete Pracember. Read more »

BTCWare-PayDay Ransomware

BTCWare-PayDay Ransomware

The BTCWare-PayDay ransomware is a malicious computer threat that stealthily gets on the computer and encrypts files of different formats. Upon encryption, the threat shows a ransom warning in a browser window. According to the warning you have to pay a ransom to have your data restored, but you should note that after receiving the money demanded, attackers do not tend to recover users' data. The possibility of having your files recovered by the attackers is close to zero, and our team at Anti-Spyware-101.com recommends that you take action to remove the BTCWare-PayDay ransomware from the computer. Read more »

Wise Xmrig

Wise Xmrig is a Trojan and a cryptocurrency mining application. Obviously, it does not have any useful features and keeping it on the system may only bring trouble. According to our computer security specialists at Anti-spyware-101.com the malicious application might mine various digital currencies by employing the user computer and using a lot of its resources. Unfortunately, as a result, the device could become slow, and on some PCs, it might become impossible to use some of the programs, run computer games, and so on. Therefore, we advise eliminating Wise Xmrig immediately, and once we present all that we have learned about this threat, we will add removal instructions at the end of the article. If you have any questions, you are also welcome to leave a comment below. Read more »

Your Computer Is In Blocked State fake alert

If your web surfing is disrupted by a warning pop-up called Your Computer Is In Blocked State fake alert, there is a good chance that your computer has been infected with malware recently or you just clicked on the wrong third-party content on a questionable website. As its name suggests, this is indeed a fake alert or also known as a technical support scam. This pop-up claims that your computer has been infected and you need to call the provided telephone number "immediately" to guide you to safeguard your system. We would like you to know that this is all made up and you should not take it seriously at all. What you should actually take seriously is the possibility that your system has indeed been infiltrated by malicious programs that may be responsible for redirecting you to such a phishing site. If you want to protect your PC, you need to remove Your Computer Is In Blocked State fake alert first and then, take care of every single threat that may be hiding on your system. Read more »

FilmsApp Search

FilmsApp Search

FilmsApp Search is a Google Chrome browser extension that should make searching for movie-related content more effective. It promises that users could find information about actors, movies, images, videos clips, and more straight from their browsers. Speaking specifically, if we blindly believe what we have found in its description, users will no longer need to access search tools to find information on the web because they could perform searches straight from their browsers’ main windows with the click of a button. Since FilmsApp Search is promoted as a beneficial piece of software, it does not surprise us at all that some people install this browser extension voluntarily. It can be downloaded straight from the Chrome Web Store (https://chrome.google.com/webstore/detail/filmsapp-search/jpecgipllfoebemnlokpldficknlfbcp?hl=en). We have to admit that this piece of software looks quite useful, but, unfortunately, we cannot confirm that it can be trusted fully because our specialists have classified it as a potentially unwanted program (PUP). Of course, potentially unwanted applications are far from harmful threats, but they might still act in an undesirable way, so we cannot let users keep them active on their computers. Read more »