BugsFighter

Chrominio Message Center is annoying badware, that is hiddenly installed in Windows and shows different variations of pop-ups. This pop-ups contain following messages and promote Chromium browser. Chromium is built on the same platform as Google Chrome, they look similar, and many users can get confused. Malefactors use this to substitute Chrome on users computers with Chromium filled with adware, pre-installed malicious extension and unwanted search engines. Chrominio Message Center is intermediary program, but it can bring major problems.

If your computer started acting weird and you see All-Radio 4.27 Portable program installed on your computer, this is cause for action. According to malware research, this, at first sight, harmless utility is, in fact, Pandora box opened on your computer. It infects your PC with a rootkit, a miner, a clipboard hijacker, a spammer, and information stealing trojan. Among first actions, we recommend changing passwords in any logged-in accounts from other safe machine. After this make backup of sensitive files, photos, documents, e-mails. After this you can use malware removal software.

Search.lavradoor.com is precarious search engine, that is installed in Safari, Google Chrome and Mozilla Firefox on Mac computers. Hijackers installs extension called "Lavradoor" in your browsers and this add-on controls and modifies your search and homepage settings. Settings cannot be changed unless extension is removed. Search.lavradoor.com redirects user queries to search.yahoo.com. Programs like this make your browsing history, search queries an open book to advertisers.

Dharma-Arena Ransomware belongs to CrySis family, previous wide-spread ransomware of this type was Dharma Ransomware, that we described on this blog. Dharma-Arena Ransomware was detected by security researches first time in August 2017. Since then, it had numerous updates. Different versions of Dharma-Arena Ransomware demand different ransom amounts. It varies from 0,20 to 0,73 BitCoins, which is near $5000. Security experts do not recommend to pay developers of ransomware, as this encourages them to create new variations and does not guarantee decryption of your files. Actually, most times malefactors don't send decryption keys. Latest versions of Dharma-Arena Ransomware are not decryptable, however there is a chance to restore files affected by older versions.

Search.hmyquickconverter.com is virulent browser hijacker, that modifies search and homepage settings in Google Chrome, Mozilla Firefox, Safari and Internet Explorer. Settings manipulation is done by means of browser extenson called My Quick Converter (current version is 4.10), that is available in Chrome Store and Firefox Add-ons gallery. Search.hmyquickconverter.com redirects search queries to Yahoo.com, and gets affiliate revenue share from advertising brought by its users. Main page of this dubiuos website also promotes website cloudconvert.com, the service for online cross-format file conversion. Add-on gets access to private browser information and can collect information about users behavior.

Opti-page.com or Opti Page Search is malicious browser hijacker, that belongs to notorious Babylon Ltd., developer of Babylon Toolbar. It can infect both Mac and Windows computers and targets Safari, Google Chrome and Mozilla Firefox browsers. Opti-page.com overwrites default values of search engine and homepage settings. Users are redirected to http://www.opti-page.com and then to one of the following search engines: Yahoo.com, Bing.com, Yandex.ru, Google Custom Search or Opti-page.com itself, depending on users geolocation. Main page of this questionable website can be filled with ads "Powered by Taggy" and have sponsored links to third-party shopping sites.

Home.searchpulse.net or Search.searchpulse.net is bogus third-party search engine, that installs in Safari, Google Chrome and Mozilla Firefox. Web application Search Pulse and company with the same name originated from Israel. Hijacker replaces homepage, default search engine and new tab settings in your browsers. Searches from Home.searchpulse.net can be redirected to Yahoo, Bing or Google. Malefactors gain advertising revenue from traffic driven to any of this search engine. However, along with redirection, Home.searchpulse.net can collect browser data and search history from users and share it with advertisers.

Bip Ransomware is another successor of Dharma/Crysis Ransomware family. New variation adds complex suffix, that ends with .bip extension, to all affected files. Bip Ransomware encrypts almost all types of files, that can be valuable to users, such as documents, images, videos, databases, archives, project files, etc. It is currently unknown, what type of encryption algorithm Bip Ransomware uses, but probably it is AES. Bip Ransomware usually demands from $1000 to $2000 in BitCoins for the decryption key. However, often hackers don't send any keys and it is not recommended to pay the ransom. As for today, the 5-th of May 2018, decryption is not possible, however, you can attempt to decrypt your files from backups or trying file recovery software.