Anti-spyware 101

If DarkKomet invades the operating system, it can record incredible amounts of highly sensitive data. The infection can record passwords, monitor the websites you visit, and even spy on you via webcam and microphone. There are many different variants of this malware because its malicious code was available for free to anyone interested at darkcomet-rat.com. This website is still alive, but if you visit it, you are informed that the “project” is no longer supported. In fact, it has been that way since 2012. The program – which is identified as a remote access tool (RAT) – was created in 2008, so it has been around for a solid 10 years now. Has it caused problems in that timeframe? Has it been used in a malicious manner? Of course, it has. In fact, it is one of the most vicious RATs out there, which is why it is so important to discuss its activity, distribution, and removal. Unfortunately, it is not easy to delete DarkKomet; at least, not manually. Nonetheless, your virtual security could depend on your success. Read more »

There are several symptoms of the successful entrance of Charm Ransomware. The most noticeable one is, without a doubt, the inability to open any personal files stored on the device. Usually, ransomware infections leave system files unencrypted because they focus on the extraction of money and do not try to ruin computers. Their primary goal is to obtain money from affected users. Charm Ransomware will try to obtain money from you too if you ever encounter it. This is the reason it locks files on affected computers as well. If your files have already been locked, there is nothing much you can do about that. Yes, you will be told that you could unlock them with a decryption key and a special tool that cyber criminals have, but you should refrain from purchasing it no matter how badly you need your files back. You simply do not know whether you will get it from cyber criminals. If they do not send you the tool you have paid for, there is, unfortunately, nothing you could do to get it from them. The ransomware infection will not be automatically removed from the system for you. Read more »

GarrantyDecrypt Ransomware is the latest file-encrypting malware to come to the attention of our malware researchers. It attacks operating systems in a covert manner, and most victims do not realize that it exists until all files are encrypted. The infection encrypts files because that is the only thing that its creator can hold over their victims’ heads. If files are important, victims might be more willing to pay a ransom in return for a decryptor. Of course, we only assume that a decryptor is on the table because the ransom note delivered by this infection is very vague. It simply asks to contact cyber criminals. Should you do it? Should you follow their instructions? Should you pay the ransom if it is requested? Should you try to decrypt your files or should you just forget about them now? These and many other questions are answered in this report. In the end, we also discuss the removal of GarrantyDecrypt Ransomware. Our Anti-Spyware-101.com research team has analyzed the threat, and we can offer a few tips that will, hopefully, help you delete it with ease. Read more »

GusCrypter Ransomware is a malicious computer infection that will not allow you to operate your comptue properly. This program will encrypt your files and it will tell you that you must pay the ransom fee to get them back.

Needless to say, paying the ransom fee should be the last thing on your mind because no one can guarantee that wiring the money to these criminals would restore your files in the first place. Your best bet at the moment would be removing GusCrypter Ransomware from your system, and then looking for methods to restore your files using other means. Read more »

GandCrab 5 LOADER is a threat that could spread the so-called GandCrab 5 Ransomware. The malware is vicious as it encrypts user’s personal data and then leaves instructions on how to pay a ransom. Unfortunately, restoring files without specific decryption tools is impossible, and so if the user does not have any backup copies, the encrypted data might be lost forever. Under such circumstances, we would advise learning more about GandCrab 5 LOADER as it could help you keep away from GandCrab 5 Ransomware. So far our researchers managed to find only one loader that distributed the particular ransomware application, so at the end of the article, you will see instructions showing how to erase it manually. However, there could be other malware’s loaders out there, and so we encourage you to read the rest of our report so you could learn more about them. Read more »

French MoWare H.F.D ransomware is a dangerous computer infection that targets mainly the French-speaking computer users. However, it doesn’t mean that you cannot get infected with this program, too. If this application has found its way into your system, you have opened the right page because we will tell you how to remove French MoWare H.F.D ransomware for good.

Scroll down to the bottom of this description for the manual removal instructions and do not forget that the best way to deal with such infections is prevention. So please consider educating yourself on the ways ransomware apps spread around. Read more »

Matrix-THDA Ransomware is a threat that drops a text file claiming the user’s files were encrypted because of some server vulnerabilities. The cybercriminals not only claim they can provide the necessary decryption key and decryption software but also offer to help the victim to secure the server/system. However, we would not recommend trusting them as no matter how friendly and polite the ransom note may appear to be, in reality, there are no reassurances they will hold on to their end of the deal. Therefore, what we recommend to those who encounter the malware is deleting it. We believe it is safer to recover files from backup copies. Not to mention, using backup files would be cost-free as Matrix-THDA Ransomware’s creators may ask for a ransom. If you want to learn more before coming up with a decision you should read the rest of this report. For those who have already decided we would suggest completing the steps listed below the article. Read more »