HotStartSearch virus also known as HotStartSearch.com is a browser hijacker that can be added as an application to Internet Explorer, Google Chrome or Mozilla Firefox. Usually it affects all of the Internet browsers installed on a computer. The obvious signs of this browser hijacker infection are replacement of home page, default search engine and new [...]
How Delta Search Virus Works
March 29, 2013 by · Leave a Comment
Delta search virus (aka delta-search dot com ) is one of the major browser hijackers today. Once the toolbar is installed, it replaces home / new tab page and then it hijacks search settings. And that is about all functions it provides. Additionally, if you uninstall it, all these settings remain as they are and [...]
The case of simple server backdoor
March 20, 2013 by · Leave a Comment
Recently, I have found that one of my servers was infected with malicious apache module. This is not something I am too proud about, but it happens. The original infection happened either through plesk or through pre-existing user. That is why I am stopping using Plesk control panels for VPS’es and DE’es I own and [...]
FbDownloader – how to uninstall it
February 21, 2013 by · Leave a Comment
FbDownloader is an application that allows any Facebook user to easily download an unlimited number of Facebook photos from their own albums or from their friends’ albums, including tagged photos. It works across multiple computing platforms and offers a number of options, including the ability to download photos in black and white or color. The [...]
How to get rid of MapsGalaxy adware
January 14, 2013 by · 1 Comment
MapsGalaxy is a browser toolbar owned by Mindspark Interactive Network, Inc. It offers such functions like map search; check of the traffic info; easy access to yellow pages, facebook and other tools. The add-on can be installed to Internet Explorer and Mozilla Firefox. Even though the features this toolbar offers might seem useful, one would [...]
How to secure WordPress blog admin area on dedicated machines
January 2, 2013 by · Leave a Comment
I have written on WordPress security in the past and listed some plugins that cover popular security issues. I still use Simple Login Log and prevent admin panel access from unknown IPs on most of my sites, but I have found another way to strengthen WP installation. Typical solution will block admin folder only. This is good enough, but it [...]
Lithuanian bank is used for processing payments for fake antiviruses
December 20, 2012 by · Leave a Comment
Although Rogue antivirus business is very profitable for cyber criminals, it has one weak point – payment processing. Basically, one needs a legitimate partner to do this, or one would have no way to get the money from credit cards except by using the cards to buy some goods (which is more dangerous). Additionally, other [...]
System Progressive Protection infection still strong
November 20, 2012 by · Leave a Comment
System Progressive Protection is not a new parasite – we wrote about it on September this year. However, its infections reached the peak only recently and it is the most distributed rogue antivirus at the moment. Although in some parts of Europe it competes with ransomware, System Progressive virus is distributed world-wide and is one [...]
What is IRMA MoneyPak virus
November 20, 2012 by · Leave a Comment
IRMA MoneyPak virus is a ransomware that was designed by computer hackers in order to steal money from random computer users. The application enters computers through infected downloads. Usually computer users get infected while visiting malicious websites or through spam email attachments. It does not require users permission and acts on its own. IRMA MoneyPak [...]
Incredimail hijack – what it is and how to fix it
November 12, 2012 by · Leave a Comment
Incredimail is quite an old email program that allows “better expressing” oneself by help of animations and funny images. This program is closely related to Incredibar (a toolbar, that is causing browser redirections), thus no wonder that IncrediMail changes search providers as well, to mystart.incredimail.com. This is done by providing opt-out checkbox during incredimail instalation [...]
Recent Comments