Discovered by Michael Gillespie, Cube is classified as a ransomware-type program. When a computer is infected, files become unusable. Cube is designed to encrypt data and keep it locked unless a ransom is paid. It also renames all encrypted files by adding the ".cube" extension. For example, "1.j
The Game Jungle application is promoted as allowing users to access an extensive collection of free online games. People tend to download and install apps of this type unintentionally. Therefore, Game Jungle is categorized as a potentially unwanted app (PUA), a browser hijacker. Typically, apps o
Scranos is a malicious rootkit driver that stealthily infiltrates the system and continually injects it with a number of high-risk payloads. Most of the payloads (injected malicious applications) are categorized as data stealers. I.e., they are designed to steal various personal information (e.g.,
Gotcha is a ransomware-type program discovered by Michael Gillespie. Like most programs of this type, it is used by cyber criminals to encrypt files stored on a victim's computer and keep them unusable unless a ransom is paid. It adds the ".gotcha" extension to every encrypted file. For example,
Microsoft Azure Web Sites is a web-hosting platform based on cloud computing, a legitimate service developed by Microsoft. It supports multiple technologies and programming languages (such as .NET, PHP, node.js, Python, and so on). As part of creating a website, the site's URL is assigned a subdom
Zippyshare is a file hosting service that can be used on the zippyshare[.]com website. Users can upload files no larger than 500 megabytes and share them with other people. This service is provided by a legitimate, harmless website, however, its developers use advertising networks. Therefore, it
apple.com-optimize[.]live is one of many scam websites on the internet. Scammers designed this site to trick visitors into believing that their computers are infected and encourage them to download a potentially unwanted application (PUA) called Cleanup My-Mac. Neither this website nor apps pro
SDEN is a ransomware-type infection discovered by Petrovic and belonging to the Matrix ransomware family. This malware is designed to infiltrate the system and encrypt most stored files using AES-128 and RSA-2048 encryption algorithms. In doing so, SDEN renames each file using the "[developer's_em
rackcdn[.]com is a legitimate website, the domain of which is owned by a company called Rackspace. This page is a part of Rackspace CDN (Content Delivery Network) and is not malicious. The main goal of the CDN service is to provide fast content delivery for visitors to their web pages, however,
COM Surrogate is a genuine Windows 10 process that is designed to run various program extensions. Users are more or less certain to find this process in Windows Task Manager. Therefore, the presence of this process does not mean that the system is infected, however, some viruses are developed to