Salesrestoresoftware@gmail.com is an email address that cybercriminals use to contact victims of ransomware, which belongs to STOP (DJVU) ransomware family. This email address is given in the message, which is in a file called ‘_readme.txt’. The ransomware drops the file ‘_readme.txt’ in every directory where there is at least one encrypted file. Attackers report that
-
-
16uBGmZqvE3idf3a3eSWYK4vYyEdFCZk1K Bitcoin Email Scam
Myantispyware team discovered a new variant of the “I have bad news for you” email scam targets Norwegian users and uses the 16uBGmZqvE3idf3a3eSWYK4vYyEdFCZk1K Bitcoin wallet account to get money from its victims. Like before, this bitcoin blackmail scam spreads via spam emails. The scam is sent out to thousands of emails at a time.
-
12SRVD4tKyP4quAHNQLkH2c8sg1BvYvqBP Bitcoin Email Scam
Myantispyware team discovered a new variant of the “Save yourself” email scam that uses the 12SRVD4tKyP4quAHNQLkH2c8sg1BvYvqBP Bitcoin wallet account to get money from its victims. Like before, this bitcoin blackmail scam spreads via spam emails. The scam is sent out to thousands of emails at a time. Type Bitcoin Blackmail Scam Subject line
-
Remove Admin@decryption.biz Bkpx ransomware (Restore .bkpx files)
If your personal files does not open normally, their names modified or .[Admin@decryption.biz].bkpx added at the end of their name then your machine is infected with a new Admin@decryption.biz Bkpx ransomware from a family of file-encrypting ransomware. Once started, it have encrypted all documents, photos and music stored on a PC drives and attached network
-
How to remove Wauchos trojan [Malware removal guide]
What is Wauchos trojan? Wauchos trojan is a malware. It can hide itself in the PC’s memory and files, modify some Windows OS settings and block them from changing. Download and install other malicious software, ad supported software and potentially unwanted programs. On current date, the Wauchos malware continues to increase the number of systems
-
How to remove MessengerTime adware [Virus removal guide]
The MessengerTime is an adware (sometimes named ‘ad-supported’ software). The ad supported software can modify computer setting in order to start automatically when the computer boot. You will be annoyed about it. Similar to other undesired software, the ad-supported software can display ads without your’s permission, and these intrusive advertisements is difficult to shut down.
-
Remove Usync.nexage.com Mapuser pop-ups [Virus removal guide]
In the last few days, many users have encountered unexpected Usync.nexage.com pop-ups suggesting downloading a questionable files named like “mapuser?providerid=29472userid=”. In the article below we’ll look at some of the easiest ways to get rid of these Usync.nexage.com pop-ups, check your computer for malware and restore normal system settings. To remove Usync.nexage.com Mapuser pop-ups, follow
-
How to remove 83inzv.com pop-up ads [Chrome, Firefox, IE, Edge]
The 83inzv.com is classified as misleading ‘ad’ web-page. This web-page is created to trick you into filling up a fake survey. If you are seeing this intrusive web site then it is possible that your web browser is infected by an adware (sometimes called ‘ad-supported’ software). As a result of the adware infection, your internet
-
How to remove Putrr18.com redirect [Chrome, Firefox, IE, Edge]
It’s not a good idea to have an unwanted application such as this ad supported software on your system. The reason for this is simple, it doing things you don’t know about. The ad-supported software can also be used to gather personal data that can be later transferred to third parties. You don’t know if
-
Remove UmbreCrypt virus (Decrypt .umbrecrypt files)
UmbreCrypt is a virus from a family of CrypBoss ransomware. Once started, it will encrypt all victim’s files and documents stored on a computer drives and attached network drives. It uses very strong hybrid encryption with 2048-bit key. When UmbreCrypt encrypts a file, it will change a file extension to the .umbrecrypt_ID_{your_id}. Once the virus
