Typically, scammers behind tech-support scams such as this attempt to trick users into installing unwanted software, providing remote access to computers or paying for unnecessary "technical" services. In most cases, these websites display fake virus/error notifications claiming that users must f
HANTA is a piece of malicious software categorized as ransomware. It operates by encrypting data and demanding payment for decryption. I..e., victims cannot access/use files affected by HANTA, and receive ransom demands for access/use recovery. During the encryption process, files are appended wi
Ransomware is a type of malware that encrypts files to prevent victims from accessing them until they are decrypted using a specific decryption tool (software, key). CrYpTeD ransomware variant encrypts and renames files. It appends the ".CrYpTeD" extension to their filenames. For example, it rena
Pictures Lab is advertised as an image processing program, which includes different filters and tools to analyze images (PNG, JPEG, GIFF, and other image files), however, this app functions as adware (advertising-supported software): it generates revenue for its developer by serving advertisements
PDFConverter is software endorsed as a tool for converting various file formats. According to its promotional material, it is capable of converting Doc, PDF, XLS, JPG, HTML, and many other formats. Since most users download/install PDFConverter inadvertently, it is classified as a Potentially Unw
Cm99v ransomware is a type of malware that prevents victims from accessing their files by encrypting them with a strong encryption algorithm. Like most ransomware variants, Cm99v renames encrypted files by changing their extensions. This particular variant renames files by appending the ".cm99v"
Lizscudata is malicious software categorized as ransomware. Systems infected with this malware experience data encryption (i.e., the files are rendered inaccessible and useless) and users receive ransom demands for decryption. During the encryption process, affected files are renamed according to
TheStreamSearch is classified as a browser hijacker because it changes certain browser settings to thestreamsearch.com. I.e., TheStreamSearch promotes a fake search engine by forcing users to visit its associated address. The TheStreamSearch application can also read browsing-related, and possibl
pu[.]biz sites (e.g., pu5[.]biz, pu6[.]biz, and many other domain variations) are rogue web pages. They present visitors with dubious content and/or redirect them to other untrusted/malicious sites. Typically, users access these websites inadvertently - most are redirected to them by intrusive ad
Id2020 is a ransomware-type program, which operates by encrypting data and demanding payment for decryption. Victims cannot use the files affected by Id2020, and are asked to pay to recover access and use of their data. During the encryption process, files are renamed following this pattern: orig