BugsFighter

Ad-Aware Secure Search is browser extension that can be installed in Google Chrome, Mozilla Firefox or Internet Explorer. It modifies newtab, homepage and search engine settings to defaultsearch.co, that redirects to lavasoft.gosearchresults.com. Unfortunately, these websites provide bad results and filled with sponsored ads. Users are unable to alter those settings until removal of Ad-Aware Secure Search extension. However, even after complete elimination users see remnants in browsers, because settings remain unchanged. Although, Ad-Aware is vendor of security solutions, such alliance with advertising companies may only have bad influence on overall computer security and users privacy.

Search.mapseasy.net or MapsEasy New Tab is deleterious browser hijacker, that is the part of browser extension called MapsEasy. Add-on can be installed in Google Chrome or Mozilla Firefox. It features in-built toolbar with quick access links to online map services, yellow and white pages, road traffic websites and other resources. It is free, but in exchange it replaces default homepage, search engine and new tab settings to Search.mapseasy.com. This search engine cam be powered by Bing.com, which is lesser evil, or by questionable Search.tools, that has zero information available and provides poor search results. First of all, third-party add-ons like MapsEasy may compromise browser security and user privacy, by getting access to sensitive data, stored in browsers and generating ads inside SERPs.

Nozelesn Ransomware is new type of ransomware, that uses AES-128 encryption to encode user files. It appends .nozelesn extension to "in cipher" files. According ro researchers Nozelesn Ransomware firstly targeted Poland, but then expanded to other european countries. After successful encryption virus drops HOW_FIX_NOZELESN_FILES.htm file with ransom-demanding message on the desktop and in the folders with affected files. The price for decryption is 0.10 BitCoins, that is currently ~$650. Malefactors promise to send decryption key within 10 days. However, cybercrooks cannot be trusted as, according to our experience, oftne do not hold out promises not to put their encryption algorithm at risk. At the moment of writing this article there is no decryptors released, but we keep abreast of the situation.

Mac Mechanic is potentially unwanted program for Mac OS, that looks like legitimate application for system optimization and virus removal. It originates from India. After the test on new MacBook Mac Mechanic finds several "high-risk" problems and demands from 19.95 to 49.95 Euros for solving. However, some of the results are false, which puts the program to the category of rogue software. When users try to uninstall Mac Mechanic by moving it to trash it says "application cannot be deleted".

JobCrypter Ransomware is crypto-virus ransomware based on Hidden Tear code. Virus adds .locked or .css extension sto encrypted files. This crypto-extortioner encrypts user data using 3DES, and then requires a redemption to return the files back. Judging by the text of the demand for the ransom, JobCrypter is focused only on French users. However, it is noteworthy that many infected JobCrypter PCs were in Lithuania. To remove the blocking of files, the affected party needs to pay a ransom of 300 euros from the PaySafeCard.

Updated version of STOP Ransomware ransomware appends .PAUSA, .CONTACTUS, .DATASTOP or .STOPDATA suffixes to encrypted files. Virus still uses RSA-1024 encryption algorithm. All versions, except .STOPDATA, demand $600 ransom in BTC (BitCoin cryptocurrency), last one offers decryption for $200. Still malefactors offer to decrypt from 1 to 3 files for free to prove, that decryption is possible. This can be used to attempt decoding in future. At the moment, unfortunately, the only way to restore your files is from backups.

Mac Tonic, similar to Win Tonic, is rogue optimization and security application for Mac OS. Although, it has look and feel of a legitimate program, Mac Tonic was designed to earn money on unnecessary Mac tweaks, pseudo-optimization and other features, that can be achieved by means of operating system options itself or by using free programs. It is installed on computers without users consent and adds itself to Mac startup. After installation Mac Tonic scans your system for viruses and errors, and always finds something even on brand new machines. Then it offers to purchase it to fix the issues. If users ignore it, program starts displaying alerts on the desktop.

Trovi.com by Conduit Ltd is very wide-spread browser search hijacker that infects Google Chrome, Mozilla Firefox, Internet Explorer. It originates from Israel. Trovi.com infiltrates into browsers and replaces default search, homepage to http://www.trovi.com, http:/labs.trovi.com, http://search.trovi.com.