RegistryDoc (or Registry Doc) is software that supposedly improves computer performance, removes junk files, fixes the registry, optimizes browsers, and allows quicker access to files. In fact, this program is classified as a potentially unwanted application (PUA), since developers distribute it u
Meknews[.]biz is a rogue site. It functions by redirecting to untrustworthy and/or malicious websites, also by presenting questionable content for user consumption. There are thousands of dubious sites out there and they share many similarities; weads32.com, soptarroutg.com, newsfrog.me, mediafres
Nymeria (also known as Loda or LodaRAT) is a high-risk trojan virus, which serves as a keylogger and a remote access tool (RAT). This malware is written in the AutoIT scripting language. Although quite simple from a technical point of view, Nymeria is extremely dangerous and can cause issues relat
Retadup is the name of a worm, a malicious program capable of reproducing itself to infect as many computers as possible. Research shows that, in most cases, Retadup installs cryptocurrency mining software, however, it might also be used to infect computers with Stop ransomware and/or Arkei passw
Rogue sites are innumerous and donaldbluepage[.]icu is but one of them. They share many similarities in-between; corresponding websites include newsredir.com, procontent.me, dredrewlaha.info, viralupdatestoday.com and etc. These dubious sites are designed to redirect users to other unreliable and
Identical to Xtron PC Speedup, Xtron Optimizer Pro, and a number of others, Xbits Speedup Pro is a deceptive application that claims to be a high-end system optimization tool. Judging on appearance alone, Xbits Speedup Pro may seem legitimate and useful, however, it is categorized as a potentiall
Bigclicker[.]me is a rogue site, akin to naneso.com, pushmehoney.com, ernorvious.com and many others. It is designed to cause unauthorized redirects to unreliable/malicious websites and to present visitors with highly dubious content (including click-bait). There are thousands of rogue sites out t
Discovered by Raby, Pack14 (also known as Avest) is software classified as ransomware. People with computers infected by Pack14 cannot access their files, since it locks them using a strong encryption algorithm. Typically, to regain access to their files, victims are encouraged to pay a ransom. P
Discovered by Alex Svirid, Lazarus ransomware is derived from King Ouroboros, another ransomware-type program. Ransomware encrypts data (blocking access to it). Cyber criminals create these programs to extort money from victims by demanding ransom payments in return for a decryption tool and/or ke
First discovered by malware researcher, Raby, Adage is yet another variant of high-risk ransomware called Phobos. This malware is designed to stealthily infiltrate computers and encrypt most stored files, thereby rendering them unusable. Additionally, Adage renames each file by appending the victi