Author Archives: Max Lehmann - Page 24

KingMiner Cryptojacking connects to the Internet without any permission and uses the computer’s CPU to mine cryptocurrency. It is a malicious application that allows hackers to generate money while using another computer’s resources. Since the threat enters the system without the user’s permission, it falls under the classification of Trojans. Our researchers say it is difficult to detect and users may only suspect something could be wrong because of the worsened computer’s performance. If you think your system might be infected with KingMiner Cryptojacking, we recommend learning more about it by reading the rest of this report. The removal instructions available below could be of use to you too, but if the process looks too challenging, we would advise using a legitimate antimalware tool instead. Read more »

VegaLocker Ransomware is a malicious program that enciphers files with a robust cryptosystem. The purpose of doing so is to lock files the user might want to get back at all costs, e.g., photos, various documents, and so on. Soon after encryption, the malware should show a ransom note demanding to pay for decryption. The hackers do not name the price for their decryption tools, but whatever it is, we would not recommend paying it if you hate the idea your savings could be lost in vain. It could happen as cybercriminals cannot be trusted, and there is a possibility they might scam you. Therefore, we believe the safest option is to eliminate the malware. To erase VegaLocker Ransomware manually, you could follow the removal instructions provided below. As for users who prefer automatic features, we would advise deleting the threat with a legitimate antimalware tool. For more details about the malicious application, we invite you to read our full report. Read more »

tRat is a malicious application created by a group of hackers who call themselves TA505. The same cybercriminals are responsible for malicious programs known as Dridex and Locky Ransomware. It is not a new threat since the first time it was noticed was a few months ago. It might still be active at the moment of writing, and if you have not heard of it yet, we highly recommend reading our full report. This Trojan can collect data about the infected device and then download malicious files to complete specific tasks given to the threat by its creators. In other words, the malicious application could be highly capable, and for your computer’s and privacy’s safety it would be wise to get rid of it without any delays. Users who feel up to the task could use the instructions located below. Of course, tRat can be removed with an antimalware tool too, so if you prefer using such a tool, all that is left to do is make sure it is legitimate. Read more »

If we had to name one threat that Windows users need to avoid, Bestdecoding@cock.li Ransomware could be it. Although it is pretty unoriginal, it is a file-encrypting threat, which makes it very dangerous. Every file affected by this infection is modified to ensure that it can be read only using a special decryptor. Where is it? We do not know if it is a real thing at all, but if it is, cyber criminals must have it hidden somewhere out of research. If you were able to obtain the decryptor for free, there would not reason for malware attackers to create ransomware and communicate with victims. Read more »

FCrypt Ransomware is a threat that can encrypt files, but it is unlikely that it spreads and that it encrypts files in reality. First of all, our Anti-Spyware-101.com research team has not found any victims of this malware. Second, the tested sample of the threat did not request a ransom, which is what most file-encrypting ransomware request. It appears that maybe someone created this malware just for fun or to educate themselves. In any case, even if this malware does not invade real operating systems that belong to regular Windows users, we cannot ignore it. Just in case the threat attacks, we have created a removal guide that shows how to get rid of it. More important, the guide explains how to protect the system and personal files to ensure that ransomware cannot invade in the first place. Note that the same security tips can be applied to avoid other kinds of malware too, and so you should continue reading. If you have questions – post them in the comments section. Read more »

If you run your Windows operating system using Polish, or you live in Poland, FORMA Ransomware is the threat you need to beware of, amongst thousands of others. While most infections are pretty versatile, and they use English to deliver messages intended for victims, once in a while, we see a threat that has a very specific target. That is how the threat we are discussing in this report works too. The distribution of this malware is still very mysterious, but it is likely that attackers could use spam email attacks to spread the launcher. The threat could be bundled with unreliable programs that might be available on Polish file-sharing websites too. The attackers could also spread malware randomly, but set it to attack only those systems whose IP addresses link to Poland. In any case, if this malware got in, you need to eliminate it as soon as possible, and Anti-Spyware-101.com research team is ready to help you. We have created a guide that should help you remove FORMA Ransomware, and we also discuss other options you have when deleting this dangerous infection. Read more »