If you have noticed that all your searches go through http://search.playzonenow.com/search/?category=web&s=26ds&vert=movies, MoviesNow Search must have affected your browser. This piece of software is a Google Chrome browser extension that promises to give users movie results they are looking for. It can be directly downloaded from its homepage (http://www.playzonenow.com/) or the Chrome Web Store (https://chrome.google.com/webstore/detail/moviesnow-search/jdlfcojphpllalfihhgimnnpbeddbpoc), but judging from the total number (98 837) of users who have installed it from the official Chrome store, it is not extremely popular yet. If you have already discovered MoviesNow Search active on your computer, our recommendation for you would be to remove this suspicious extension. If you are still considering whether or not you should install it, we highly recommend that you install another add-on with similar features instead because MoviesNow Search is considered a potentially unwanted program. These programs are far from real malware, but our specialists still do not recommend keeping them active because they might perform various undesirable activities. You will find more about MoviesNow Search if you continue reading. Read more »
MindLost Ransomware
Ransomware programs are incredibly prevalent nowadays. Malware experts at Spyware-Techie.com have noticed one such application currently roaming the web, which goes by the name of MindLost Ransomware. If you ever find it up and running on your operating system, make sure to execute its thorough removal right away. Doing so is imperative because an application of this category can act maliciously, to put it mildly. Like any other ransomware program, the one in question is designed to encrypt a large number of files stored on the affected computer. As you can imagine, having a devious application capable of such functionality could have devastating outcomes. To have a better understanding of how this malware works, be sure to read the rest of this report. Additionally, we present a few virtual security tips that will help you keep your operating system clean and secure. To help you delete MindLost Ransomware, we include detailed removal instructions, which you can find below. Read more »
Myoffers.bid
Adware servers may not be your worst nightmare, but they can be easily used in a number of corrupted schemes. Myoffers.bid may pop up in your screen offering various sales deals, interesting web pages, wallpapers, and so on. If you no longer want to be redirected to this server, you should try resetting your browser because there might be an extension that constantly redirects you to this website. At the same time, you should also consider scanning your system with a security program. It is very important that you scan your system with a reliable antispyware tool as well, to ensure your computer’s safety. Read more »
Webdigger.net
Webdigger.net is a browser hijacker that might infiltrate your computer without your knowledge and then immediately change all browsers’, including Mozilla Firefox, Google Chrome, and Internet Explorer settings. Research has shown that it is the most active in Mexico; however, it does not mean that you do not need to be careful if you live in a different place. Since this browser hijacker is spread in software bundles, it might soon become prevalent in your region too. If you could not stop this threat from entering your computer and now see Webdigger.net when you launch your browser, there is no doubt that you have encountered the browser hijacker too and need to take action as soon as possible. Browser hijackers are far from ordinary programs, so you will need to put more effort into its removal. No, you cannot let it stay because the untrustworthy search tool will stay set on your browsers and, as a consequence, you will be forced to use it to perform web searches. In the worst-case scenario, it might even take you to untrustworthy pages and expose to potential threats, so the sooner it leaves your browsers alone, the better. Read more »
PornBlackmailer Ransomware
A scareware infection named PornBlackmailer has made its headlines in January 2018 when an online forum user created a post about a malicious .scr file reportedly downloaded from the free pornography website Xvideos. The PornBlackmailer ransomware blackmails victims to pay a fee so that they are not reported to the police about the use of pornographic material involving children.
It is still not specified whether the name of the infection PornBlackmailer is the right name for the threat, because the string "HowSexWithDolls" found in the codes of different variants of the threat suggests that this could be another name to use.
The PornBlackmailer ransomware differs from conventional ransomware infections that encrypt files and show the victim a ransom note in full screen or a program window. The PornBlackmailer does not tamper with the victim’s files but uses other scare tactics to extort money from the unsuspecting user. The infection should be removed immediately after being spotted, and you should also keep in mind that the threat resides on the computer even if no ransom notification is displayed after restarting the computer. The threat does not create its point of execution, which means that it does not start at every system startup, but that does not change the fact that it is necessary to remove PornBlackmailer. Read more »
Gh0st RAT
Gh0st RAT was a threat involved in the operation called GhostNet back in 2008. GhostNet is the name of the network consisting of both compromised computers and C&C servers. Users initiated the installation of Gh0st RAT themselves by opening a phishing email and clicking on a malicious URL inside it, which when clicked, connected the user to the C&C server and downloaded a dropper. The dropper then connected to the C&C server once again and downloaded this Trojan. Infected computers were considered a part of GhostNet. Specialists say that Gh0st RAT infected 1295 computers in 103 countries. Among its victims were diplomatic, political, and military institutions. It is hard to say whether GhostNet is still active, but researchers are sure that users might still discover Gh0st RAT on their PCs if they keep them unprotected because the builder of this Trojan is available for download at GitHub (https://github.com/sincoder/gh0st). It might be downloaded by anyone and then used for various malicious purposes. Specialists say that this infection will not act the same in all the cases because cyber criminals might customize it to fit their needs. Consequently, it might be harder for users to detect it, especially when it infiltrates users’ computers without their knowledge and performs all its malicious activities in the background. Read the rest of this article to find out what it is capable of and how to erase this infection fully from the system. Read more »
Screen Watch
Screen Watch is a suspicious browser extension that promotes a search page that could pose a threat to your system security with its potentially unreliable features. As its name may suggest, this Google Chrome extension offers you quick links to movie-related websites as well as popular sites like Facebook and Amazon. Our malware specialists at anti-spyware-101.com classified this tool as a potentially unwanted program (PUP); although, it is possible that due to its capabilities it may be considered as a browser hijacker. In fact, it has been found that this PUP is very similar to others like Muzik and Seen On Screen. Since you could be exposed to potentially harmful third-party content (ads and links) while using this tool, we suggest that you remove Screen Watch even if you are a movie fan. Please read on to find out more about this threat. Read more »
Scarabey Ransomware
Scarabey Ransomware is not a program, which should never be up and running on your personal computer. In fact, we highly advise you to delete it if it is ever found up and running on your operating system. Doing so is critical because this malicious piece of software can act in an incredibly devious manner. If you are not familiar with ransomware programs, you must know that this category of applications can easily encrypt a massive amount of data stored on the affected computer without any notification or authorization. As you can imagine, having such program will have devastating outcomes, to put it lightly. Learn more about the inner workings of this malicious program by reading this report entirely. Additionally, we provide a few virtual security tips that will help you maintain a clean and secure system at all times. Finally, to help you delete Scarabey Ransomwareonce once and for all, we include a detailed removal guide that you can find below. Read more »
Yoshikada Ransomware
Most likely, you have found this report and started reading it because you have already discovered Yoshikada Ransomware on your computer. This is a new crypto-threat, but it does the same job as many other ransomware-type infections. That is, this nasty infection locks users’ personal files right away after slithering onto their computers without their knowledge. A motive behind this activity is only one – to obtain money from users. If this threat has already entered your system without your knowledge, and locked your files, you should be able to find a new file on your computer. This file is a ransom note. You might not find the exact amount of money you have to send to cyber criminals indicated in it, but you will find out that you need to purchase the special decryptor from cyber crooks so that you could unlock those encrypted files. If you do not know what to do, we want you to know that we do not recommend transferring money to crooks no matter how much money they ask. It is unclear whether you will get the tool you pay for. Cyber criminals might change their minds and not give it to you. In this case, you could only blame yourself because nothing else could be done. In addition, if you send money to them, they will realize that it is worth spending time on the development of malware. Consequently, you might encounter new harmful threats in the future. Read more »
Search.hyourweatherinfonow.com
Search.hyourweatherinfonow.com looks like one of the Polarity Technologies Ltd browser hijackers. Our researchers confirmed it after taking a look at the software’s Privacy Policy and End User License Agreement documents. Not to mention, the application looks almost the same as the other browser hijackers from this company that we have already tested earlier. All of its clones provide a search box and a toolbar containing links to various web pages. In this case, the threat offers links to sites providing news, reports, weather forecast, and so on. Even though such links could seem to be useful, we would not recommend leaving Search.hyourweatherinfonow.com on your browser. It might also display questionable advertisements containing links to third-party websites, e.g., scam websites, sites suggesting other threats alike, and more. It seems to us it would be smarter to stay away from such material. If you think the same, we advise you to get rid of this suspicious application with the instructions located below or a legitimate antimalware tool. Read more »