Threats category archyve:

Desktop Ransomware

Desktop Ransomware

If you keep some of the most important files on your Desktop, the malicious Desktop Ransomware is one of those threats you want to keep away at all cost. As the name suggests, it is targeted at all files on the Desktop, and it can encrypt them by changing their data. The good news is that a decryption code – which is also known as a pin code – has been made public, but it is always possible that the developers of this infection could change things around to ensure that the victim cannot get away easily. This should push them into clicking “Get PIN,” which probably would lead straight to the attacker. At the time of research, the “Get PIN” button was routing to a page that did not exist, but that too could change in the near future. We discuss this further in the report. Anti-Spyware-101.com research team warns that although the infection might not be spreading vastly, it is a threat to watch out, which is why we add a removal guide. If you want to learn how to delete Desktop Ransomware, continue reading. Read more »

FileFuck Trojan

FileFuck Trojan

Anti-Spyware-101.com research team is warning about Filefuck Trojan. It is not clear if this malicious threat is actively spreading across the web, but we know for a fact that this threat exists. Our team has managed to obtain a sample and test it in our internal lab. The findings are pretty interesting. First of all, it was found that the Trojan was built using the infamous Hidden Tear source code, the same one that has been used by the creators of SnowPicnic Ransomware, EnybenyCrypt Ransomware, SymmyWare Ransomware, and a bunch of other file-encrypting threats. The strange thing is, however, that this Trojan does NOT encrypt files and it does NOT demand a ransom. Instead, it removes files completely, and then it simply informs the victims that they are screwed. Was this malware created as a joke? Was it created to educate victims in a cruel way? Whatever the case it, the outcome is not good because the files cannot be recovered. If the infection attacks, the only thing you might be able to do is to delete Filefuck Trojan. Read more »

XARCryptor Ransomware

XARCryptor Ransomware

Our researchers report there is a new GarrantyDecrypt Ransomware version called XARCryptor Ransomware. It encrypts user’s files and shows a ransom note too, although the way it marks affected data has changed. Another thing we noticed about it is that the malware may attempt to steal user’s passwords and data related to his browsing habits. Needless to say, if you want to keep your private and sensitive data secret, you should get rid of XARCryptor Ransomware immediately. The steps available below this article will show how to remove the malicious application manually. Nonetheless, if you wish to find out more about it first, we encourage you to read the rest of the text. Read more »

SnowPicnic Ransomware

Anti-Spyware-101.com research team is warning about SnowPicnic Ransomware, which could potentially work as a file-encrypting, ransom-demanding threat. At this time, this “ransomware” is not functional, and there is a possibility that it will never see the light of day, so to speak. That being said, we simply cannot guarantee that this malware will never be used for its intended purpose, and that is why we are reporting it right away. Without a doubt, NOW is the time to secure your system and prepare for a potential ransomware attack. Since there are, literally, hundreds of other file-encryptors that can attack you today, you really need to take action. If you continue reading, you will learn how to take care of your system, as well as how to remove ransomware if it manages to slither in. We also talk about deleting SnowPicnic Ransomware. First, scan your operating system to check if you are not currently battling malware that requires attention. If your system is clear, focus on protecting it. Read more »

"Microsoft detected an unsolveable Therat" Locker

"Microsoft detected an unsolveable Therat" Locker appears to be a fake alert. Even though the notification’s developers tried their best to make it look like the message was displayed by the device’s operating system, its tone and grammatical mistakes raise suspicion. If you have encountered this questionable warning too, we encourage you to read our report carefully so you would not fall for the scam. Further, in the article, we will tell more details about this fake alert, for example, where it might come from and what to do if you encounter it. Also, at the end of the article, we will place instructions explaining how to remove "Microsoft detected an unsolveable Therat" Locker from the system. Thus, if you are here to learn how to delete the threat, you may want to have a look at the provided steps. Read more »

StupidJapan Ransomware

StupidJapan Ransomware

It seems as if StupidJapan Ransomware was made not to extort money, but to insult its victims. The threat does not encrypt any data and even makes no attempts to trick users into believing the files were locked. The message that is supposed to be the malicious application's ransom note insults the user instead of asking for any money. Naturally, it is probably better to be called stupid or garbage instead of losing precious family photos and other irreplaceable files that other ransomware applications encrypt. However, such message and the malware’s working manner indicate the threat could be a joke or just a test version. Either way, it is doubtful it might be distributed among lots of users. Nonetheless, we cannot be sure it is impossible to receive it. Thus, at the end of the article, we will add instructions showing how to deal with StupidJapan Ransomware manually. Read more »

Do not panic! 'I'm a programmer who cracked your email account' email is a Scam

The 'I'm a programmer who cracked your email account' Scam is a scam that reaches you via your inbox. The message is completely misleading, but it is pretty intimidating, which is why it is no wonder the targeted users are sometimes tricked into following the instructions, which include transferring $819 to a Bitcoin wallet that belongs to schemers. If you have paid the ransom as well, we cannot help you recover this money. You could try to contact your bank and talk to them about the scam, but if your savings are not insured, it is unlikely that you will get your money back. If you are still reading through the scam email, there is only one thing you need to do right now, and that is to remove 'I'm a programmer who cracked your email account' Scam email. Read more »

BooM Ransomware

BooM Ransomware

BooM Ransomware is a malicious program created by a hacker who calls himself Mohamed Naser Ahmed. It encrypts user’s files, marks them with .Boom extension, and then displays a message saying the only way to decrypt data is to obtain a unique password. Apparently, to get the passcode, the victims have to contact the malware’s developer. Usually, hackers give their email address, but in this case, the threat’s creator wants to be contacted through a popular social media platform known as Facebook. There are a couple of reasons why we believe this could be a bad idea and if you want to learn them, you should continue reading our report. What’s more, below the article we will place our prepared deletion instructions that will explain how to remove BooM Ransomware manually. Besides, if you have any questions, you can leave a comment at the end of this page. Read more »

System Firewall Has Blocked Some Features Pop-up

The misleading System Firewall Has Blocked Some Features Pop-up can appear to be very convincing, and less experienced users could be tricked by the scam. The pop-up might appear to be legitimate, but, in fact, it was created by schemers who want nothing else but to push people around and trick them into doing things that could be dangerous for their virtual security. From what Anti-Spyware-101.com research team has gathered, the schemers behind this particular threat appear to be after money. This is not surprising at all, considering that money is the #1 driving force behind most scams. Who would waste their time and energy for nothing in return? Definitely not schemers. Communicating with the schemers behind this devious scam is, without a doubt, the worst thing you could do for your virtual security. Whether or not you have done that, you will find useful information in this article. Continue reading if you wish to learn how to delete System Firewall Has Blocked Some Features Pop-up, as well as how to ensure that you are not hit by similar scams in the future. Read more »

EnybenyCrypt Ransomware

EnybenyCrypt Ransomware is not a complicated infection, but the problems it creates can complicate your life immensely. This threat is a file encryptor, and if it manages to slither into your operating system and corrupt your personal files, you might hit a wall with no point of return. You can escape the situation only if your files are backed up. Although most of us back up our files on external drives or online, if the infection hits those who do not use backup, its creators can be successful at swindling money out of them. The purpose of the infection is to make victims pay money, and they can achieve that by offering a miracle decryption tool that, allegedly, can restore files that the infection itself encrypted. This is a pretty genius scam because the victims have no other option; unless backups exist. Unfortunately, the decryptor is unlikely to be given to users even if they pay. That is why, in this report, we do not discuss the process of ransom payment. Instead, we show how to delete EnybenyCrypt Ransomware. Read more »