Pracember

Pracember

Have you been forced into installing Pracember? Our Anti-Spyware-101.com research team has recently discovered that this undesirable extension can be introduced to users in an aggressive manner: Via pop-ups and ads that redirect to a full-screen page. The notification on the page informs that you can leave it only if you install the extension that is offered. This is not the first time an unreliable extension is introduced to users in this manner. In fact, more and more add-ons and applications are spread this way, including Search Bay, Tank Runner, and Toothy. Needless to say, you should never install unfamiliar programs just because you might be out of options. When it comes to installers represented via web pages, you always have the option to terminate the browser via the Task Manager, and if you do not know how to do that, you can restart your computer. If the browser is set up to open the last page visited, you can reinstall the browser. All in all, it is unlikely that you will need to take measures this aggressive, as you should be able to just close the browser. What if the potentially unwanted program is already installed? In this case, we recommend reading this report to learn how to delete Pracember. Read more »

BTCWare-PayDay Ransomware

BTCWare-PayDay Ransomware

The BTCWare-PayDay ransomware is a malicious computer threat that stealthily gets on the computer and encrypts files of different formats. Upon encryption, the threat shows a ransom warning in a browser window. According to the warning you have to pay a ransom to have your data restored, but you should note that after receiving the money demanded, attackers do not tend to recover users' data. The possibility of having your files recovered by the attackers is close to zero, and our team at Anti-Spyware-101.com recommends that you take action to remove the BTCWare-PayDay ransomware from the computer. Read more »

Wise Xmrig

Wise Xmrig is a Trojan and a cryptocurrency mining application. Obviously, it does not have any useful features and keeping it on the system may only bring trouble. According to our computer security specialists at Anti-spyware-101.com the malicious application might mine various digital currencies by employing the user computer and using a lot of its resources. Unfortunately, as a result, the device could become slow, and on some PCs, it might become impossible to use some of the programs, run computer games, and so on. Therefore, we advise eliminating Wise Xmrig immediately, and once we present all that we have learned about this threat, we will add removal instructions at the end of the article. If you have any questions, you are also welcome to leave a comment below. Read more »

Your Computer Is In Blocked State fake alert

If your web surfing is disrupted by a warning pop-up called Your Computer Is In Blocked State fake alert, there is a good chance that your computer has been infected with malware recently or you just clicked on the wrong third-party content on a questionable website. As its name suggests, this is indeed a fake alert or also known as a technical support scam. This pop-up claims that your computer has been infected and you need to call the provided telephone number "immediately" to guide you to safeguard your system. We would like you to know that this is all made up and you should not take it seriously at all. What you should actually take seriously is the possibility that your system has indeed been infiltrated by malicious programs that may be responsible for redirecting you to such a phishing site. If you want to protect your PC, you need to remove Your Computer Is In Blocked State fake alert first and then, take care of every single threat that may be hiding on your system. Read more »

FilmsApp Search

FilmsApp Search

FilmsApp Search is a Google Chrome browser extension that should make searching for movie-related content more effective. It promises that users could find information about actors, movies, images, videos clips, and more straight from their browsers. Speaking specifically, if we blindly believe what we have found in its description, users will no longer need to access search tools to find information on the web because they could perform searches straight from their browsers’ main windows with the click of a button. Since FilmsApp Search is promoted as a beneficial piece of software, it does not surprise us at all that some people install this browser extension voluntarily. It can be downloaded straight from the Chrome Web Store (https://chrome.google.com/webstore/detail/filmsapp-search/jpecgipllfoebemnlokpldficknlfbcp?hl=en). We have to admit that this piece of software looks quite useful, but, unfortunately, we cannot confirm that it can be trusted fully because our specialists have classified it as a potentially unwanted program (PUP). Of course, potentially unwanted applications are far from harmful threats, but they might still act in an undesirable way, so we cannot let users keep them active on their computers. Read more »

Facebook Account Is Currently Logged In

If you find yourself on a web page that claims that your Facebook Account Is Currently Logged In on a supposed device that may not belong to you, do not panic because you are simply exposed to a fake alert. This fake warning message may look like an authentic Facebook login page and this may mislead you into believing that the claims are for real. This fake alert instructs you to call a given phone number for technical support. In fact, this is why these kinds of fake alerts are also called technical support scams. Our malware experts at anti-spyware-101.com have seen lots of similar scams in the past year, including "Possible Suspicious Activity," "Rdntrojanhacking File Detected," and "High Priority Message." Read more »

Phobos Ransomware

Phobos Ransomware

If the majority of your files located in %USERPROFILE% and other major directories have received a new extension ID.email.PHOBOS, Phobos Ransomware must have infiltrated your computer successfully and encrypted your files. While some other infections are developed to steal personal information, there is no doubt that cyber criminals develop ransomware infection for money extortion. It will demand a ransom from you too after encrypting your files. Do not transfer money to malicious software developers because your files might stay encrypted even if you make a payment. What we recommend for you is the full Phobos Ransomware removal. You cannot leave any components of this ransomware infection active on your computer because it might lock new files you create if you do not delete it fully from your system. It seems that Phobos Ransomware does not make any major modifications on users’ PCs except for encrypting their files, so we do not think that you will find it very hard to get rid of this threat. Of course, before you start the removal procedure, read what specialists working at anti-spyware-101.com have to say about it. Read more »

Ordinal Ransomware

Ordinal Ransomware

Ordinal Ransomware might still not be able to do everything its developers intend it to do. Judging from what we know, this program is still being developed. So if you got infected with this ransomware, it means that you are a test subject for its creators. The bad news though is that the program can still encrypt most of your personal files, even though it is not fully developed. Hence, you need to scramble to remove Ordinal Ransomware from your system, and then look for ways to restore your files or make sure this does not happen again. Read more »

Shadowsocks Miner Trojan

Shadowsocks Miner Trojan

Shadowsocks Miner Trojan is a malicious application that should never be active on your personal computer. If unfortunately, it is already up and running on your PC, make sure to execute its complete removal right away. It is critical to do so because this Trojan works in an extremely invasive manner. Having this devious piece of software fully active on your personal computer could make it function in a significantly slower way. Furthermore, it could be used by other suspicious and potentially harmful applications to gain access to your operating system. Make sure to read the rest of our article, as we provide in-depth information regarding this Trojan's devious functionality. You will also find a few virtual security recommendations that will help you maintain a fully secure operating system at all times. Alongside such important information, we include a detailed removal guide that you should use to delete Shadowsocks Miner Trojan quickly and easily. Read more »

Search.pollicare.com

If you have interacted with the Pollicare downloader recently, Search.pollicare.com might have changed your homepage and default search provider. This downloader is identical to the Romandos one, and it is representing the Search.romandos.com browser hijacker. Both search tools look identical, and so it is likely that the same party stands behind both of them. If this is the case, it is strange that two identical tools that serve in the same manner have been created. Our research team at Anti-Spyware-101.com strongly recommends deleting both of these hijackers, and not just because they look identical. It was found that these threats can redirect users to third-party pages without their permission, as well as employ cookies to record and share data. If you want to learn more before you decide if you should remove Search.pollicare.com from your browser, please continue reading. Note that the comments section is open, and if you have any observations, questions, or information, you can add it there. Read more »