Mac Ads Cleaner is a deceptive application stating that it can boost up a computer performance. However, it’s exactly the opposite. Once launched, it starts to display a lot of non-existent threat messages in order to persuade you to buy the full version of Mac Ads Cleaner. And Mac Ads Cleaner will do it persistently displaying commercial content every time you work in front of a computer.
Tags.Bluekai.com is a so-called “redirect virus” that after penetration cause your browser to display pop-up ads and open advertising sites. Usually, such strange activity is caused by adware that may have been installed along with freeware you’ve downloaded off of the Internet. A virus also may replace your search engine with a new one that shows irrelevant search results.
XiaoBa is another version of XiaoBa crypto-virus that encrypts users’ personal files and appends them with .AdolfHitler extension. For example, file “mydoc.doc” will turn into “mydoc.doc.AdolfHitler”. To encrypt files, it uses RSA-4096 asymmetric encryption algorithm when each is assigned a unique ID key which cybercriminals transfer to a remote cloud. In the end, it replaces your desktop wallpaper with “# # DECRYPT MY FILE # #.bmp” that contains pay instruction to restore encrypted files. Moreover, it makes your system play some music in the background.
Search.schooldozer.com is a deceptive search engine that pretends to be legitimate and safe to use. The main culprit of its appearance instead of your default search engine is the browser hijacker. A browser hijacker is a small application that often gets into the system along with freeware and is used for advertising purposes.
Scarab-Rebus (Rebus) is the newest variant of Scarab Ransomware. It renames all targeted files with Base64 encoding scheme and appends them with .REBUS extension. For example, file “mydoc.doc” will turn into “2wHNr2iP509NNRi4UQYgc.REBUS”. As usual, virus places a ransom note (REBUS RECOVERY INFORMATION.TXT) on the desktop at the end of the process where the victim will find pay method to restore encrypted files.
Scarab-Osk (Osk) is yet another cryptovirus from Scarab family which lures money by blackmailing. This ransomware encrypts the most important data on user’s computer, renaming affected files and adding .osk extension. For example, file “mydoc.doc” will turn into “2wHNr2=iP509GBmqO50aTPAu2mNNRi4fA2soVFTkoC4FJUQNMiYgc.osk”.
Only-search.com is a computer infection called browser hijacker used for link promotion. Although it’s almost harmless it still brings some inconvenience to users’ browsing experience. Once installed, it corrupts browser settings, replaces configured search engine with Only-search.com, injects third-party advertising, and also causes unwanted redirects.
Sigrun is a cryptovirus that demands money for data recovery. Once it crawls into the system, ransomware starts to scan your system in order to find most sensitive files on user’s computer such as documents, photos, and video. Then, all targeted files will be encrypted using AES algorithm and renamed with the addition of the .sigrun extension.
Horsuke is yet another popular today ransomware virus that encrypts users’ files. Working principle of the virus is simple enough – it encrypts files and demands money for data recovery. The virus targets all sensitive files on victim’s computer such as photo, video, and documents.
Developers of Rapid Ransomware do not sit on their hands, following Rapid 2.0, they’ve released the third version of the virus. As a previous version, Rapid 3.0 blocks access to the users’ personal files using AES-256 encryption algorithm. To get back your files, malefactors demand a ransom which is made in bitcoins through Tor browser. This is done to remain anonymous and escape punishment. Each encrypted file might be renamed in accordance with .[5-random-chars] pattern or get “.Rapid” suffix, for example, file “mydoc.doc” will turn into “mydoc.doc.Rapid”. The ransom note that Rapid 3.0 creates upon completion of encryption didn’t change the name – DECRYPT.[5-random-characters].txt:
