Laserveradedomaina.com is domain used for browser redirects an pop-ups that lead to tech support scams, advertising browser extensions, surveys, adult or dating websites or other type of unwanted landing page. It may appear in Google Chrome, Mozilla Firefox and Internet Explorer. This domain is somehow related to well-known adware called Wizzcaster. There are also similar website Ladomainadeserver.com, that has almost identical behavior.
Search.hmytemplates.co is objectionable website, used by hijackers to replace browser settings in Google Chrome, Mozilla Firefox, Safari and Internet Explorer. It replaces search engine, homepage and new tab settings to search.hmytemplates.co and then to search.yahoo.com. It is done by the means of My Templates V 1.1 add-on that installs in browsers. Until this extension is removed and corresponding application is uninstalled, users won’t be able to revert changes back. Search.hmytemplates.co can not only redirect user queries, but also collect private browser data like history, bookmarks, cookies and other parameters of online behavior.
Win Tonic is doubtful Windows optimization utility and anti-virus scanner, that is categorized as potentially unwanted program (PUP). This program is not a malware, however it uses scam pop-ups, unethical obsessive advertising for distribution. Win Tonic can also show over-exaggerated amount of problems and display alerts to scare users into purchasing the program. Because of this factors Win Tonic can be classified as scareware or even rogue software. Users report certain problems with uninstalling this application from Windows using standard methods.
Rapid Ransomware is nasty virus, that encrypts user files using AES encryption algorithm and demands ransom for decryption. All affected files get .rapid extension, in some versions .paymeme suffix is added. Rapid 2.0 Ransomware appends extensions, that contains 5 random letters in uppercase. Extension is unique for every PC. Unlike other similar ransomware threats, it does not do one time encryption, but continues to encode every new file on victims computer, whether it was just created or copied. Amount of ransom varies from $500 to $1500 and have to be paid in BitCoins. Using BitCoin payments and TOR websites, makes it difficult to find location of malefactors.
CryptXXX is ransomware crypto-virus. It encrypts user personal data with AES CBC 256-bit algorithm and asks for RSA-4096 key. Actually, CryptXXX Ransomware also steals bitcoins stored on the computer if there are any. Virus modifies names and extension of all encrypted files to .crypt, .cryp1 or .crypz, changes desktop wallpaper using de_crypt_readme.bmp (image with black background and white text), creates text file with instructions to pay the ransom (de_crypt_readme.txt), and html file with the same instructions (de_crypt_readme.html). Ransom is about 1.2 BitCoins or $400. CryptXXX Ransomware attacks data on local drives and attached storage devices.