BugsFighter

Web Companion is legal security application from Lavasoft. It was developed to promote Lavasoft products and services by installing browser add-ons such as Ad-aware Security Search, Ad-aware Ad Block, Ad-aware Web Protection and Ad-ware Smart Shopper in Google Chrome, Mozilla Firefox and Internet Explorer. Although, Lavasoft is considered reputable vendor and applications may be useful there are some side effects and undesirable consequences for inexperienced users. This extensions modify browser search and homepage to either Bing.com, Yahoo.com or Yandex.ru, depending on your location. Those are not most wide-spread search engines and novice users complain of unexpected browser modifications. Ad-aware Smart Shopper can display ads, pop-ups and discount coupons on shopping sites.

PremierOpinion by VoiceFive Networks is potentially unwanted program, that can infect Windows and MacOS systems. It can be classified as spyware and adware. Some users report ads and pop-ups by PremierOpinion, some indicate survey pop-ups in the bottom-right corner of the desktop. Research of recent versions of PremierOpinion shows, that this application collects private information about users computers without any permission and transmits this data to its servers. This data includes web surfing habits, program usage statistics, computer configuration, e-mails, adresses. There are obviously many unpleasant ways to use this information.

WhiteRose Ransomware is dangerous encryption virus from InfiniteTear family. It uses AES algorithm to encode user files. After this it appends complex suffix _ENCRYPTED_BY.WHITEROSE, and modifies the filename to random set of letter and numbers. Then, ransomware creates text file HOW-TO-RECOVERY-FILES.TXT, containing ransom-demanding message with contact information and instructions. Usually, viruses of this type ask for $500 - $1000 in BitCoins. To reсover data, users must contact WhiteRose's developers via Tox chat.

SavingsCool (sometimes presented as CoolSavings) is potentially unwanted program, that can be classified as browser hijacker and adware. It was developed to display ads, pop-ups and banners on different websites. This can be realized via installing extensions in Google Chrome and Mozilla Firefox. However, latest version of SavingsCool uses proxy hijack to drive traffic through servers controlled by the developers. SavingsCool modifies transmitted data to show advertising.

My-search.com by Pinch of Awesome, LP is malicious search engine, that has become widespread lately. It replaces default search engine and homepage in Google Chrome, Mozilla Firefox or Internet Explorer. Depending on users location My-search.com can redirect user queries to search.yahoo.com or google.com. Hijacker protects modified settings, so users are anable to get rid of My-search.com and every time they open newtab unwanted search engine is loaded. Using third-party websites with unknown origin is dangerous and may lead to privacy issues.

Search.hmytemplates.co is objectionable website, used by hijackers to replace browser settings in Google Chrome, Mozilla Firefox, Safari and Internet Explorer. It replaces search engine, homepage and new tab settings to search.hmytemplates.co and then to search.yahoo.com. It is done by the means of My Templates V 1.1 add-on that installs in browsers. Until this extension is removed and corresponding application is uninstalled, users won't be able to revert changes back. Search.hmytemplates.co can not only redirect user queries, but also collect private browser data like history, bookmarks, cookies and other parameters of online behavior.

Win Tonic is doubtful Windows optimization utility and anti-virus scanner, that is categorized as a potentially unwanted program (PUP). This program is not a malware, however, it uses scam pop-ups, unethical obsessive advertising for distribution. Win Tonic can also show an over-exaggerated amount of problems and display alerts to scare users into purchasing the program. Because of these factors, Win Tonic can be classified as scareware or even rogue software. Users report certain problems with uninstalling this application from Windows using standard methods.

Rapid Ransomware is nasty virus, that encrypts user files using AES encryption algorithm and demands ransom for decryption. All affected files get .rapid extension, in some versions .paymeme suffix is added. Rapid 2.0 Ransomware appends extensions, that contains 5 random letters in uppercase. Extension is unique for every PC. Unlike other similar ransomware threats, it does not do one time encryption, but continues to encode every new file on victims computer, whether it was just created or copied. Amount of ransom varies from $500 to $1500 and have to be paid in BitCoins. Using BitCoin payments and TOR websites, makes it difficult to find location of malefactors.