Month: January 2020

How to remove NPSG ransomware and decrypt .npsg files

by
What is NPSG? The one of the newest threats, that can anyone possibly face, is NPSG ransomware. This virus belongs to the STOP(DJVU) file-encryption ransomware family. This family of viruses is one of the most widespread ones, and it consists of such members as REPP, BTOS, TOPI, REHA, NOSU, PORET and KODC ransomwares. In the most cases NPSG ransomware infects computers by various executable files (for example fake installators), but hackers also widely use email attachments. In this case, they inject Read more [...]

How to remove BTOS ransomware and decrypt “.btos” files

by
What is BTOS? Recently, the new dangerous virus has been detected. It's called BTOS due to its extension and it is the one of the newest members of STOP(DJVU) file-encryption ransomware family. This family is a very widespread one and it consists of such viruses, as NPSG, TOPI, REHA, NOSU, PORET and KODC ransomwares. As the rule, BTOS ransomware spreads by the means of various executable files, which are shared by file sharing services and torrent trackers. However, as any other virus of this family, Read more [...]

How to remove CU ransomware and decrypt .[cyberunion@tuta.io].CU files

by
What is .[cyberunion@tuta.io].CU? The one of the recently detected threats is called CU ransomware. This virus belongs to the Dharma file-encryption ransomware family. In the most cases, CU ransomware spreads by the means of various fake installators, that are shared by numerous file sharing websites and torrent trackers. Sometimes the criminals even create special websites, that deceive users into downloading and installing of such a file as if it's something necessary. Moreover, hackers often Read more [...]

How to remove mdhok.pro pop-ups

by
What is mdhok.pro? Mdhok.pro is represented as a website, the access to which requires a click to the "Allow" button. The truth is that you won't get the access to it with a click. This website can be characterized as a phishing one. It has no content, so by clicking the "Allow" button you just give to it the opportunity to show you a great amount of various notifications, pop-ups and advertisements. However, this website is not harmful, but the linked websites can easily be. As the rule, they promote Read more [...]

How to remove “$$$” ransomware and decrypt “.$$$” files

by
What is $$$? Recently the new virus called $$$ has been detected. It got the name due to the extension ".$$$", added to the names of encrypted files. This virus doesn't belong to any already known virus family. As it's been reported, $$$ spreads by the means of various fake applications. However, hackers can also attack computers remotely by the means of Remote Access Ports. Moreover, nowadays hackers also widely use Remote Access Software, which are distributed by the means of bundles. Such programs Read more [...]