Antispyware

26/06/2019

Beware! There is a serious scam spreading around Facebook!

If you happen to receive a message from one of your Facebook contacts saying that "Its you" and the Video link, make sure you ignore it because it has a serious potential of infecting your computer with malware and also stealing your Facebook logins. Also, we highly recommend informing the sender that his or her account is infected.
As long as we have seen, the "video" links to the Video HD group on Facebook which displays the content that seems to be from Youtube. However, next, you are asked to log into your Facebook account and, this way, share your login information with hackers hiding behind this scam. Additionally, if the tactics is changed, the link in the Video HD group can infect your system with malware, e.g. trojan horse, ransomware or similar. More about the Its you video virus:

“Is that you” Facebook virus is yet another malware campaign used to extort users’ account details. “Is that you” on Facebook’s messenger is yet another

04/02/2019

Gandcrab 5.1 keeps spreading and, it seems, that Japanese users are dealing with an increased risk of getting infected with this ransomware. According to the latest reports, the virus has started using Love letter spam to infect unaware users and encrypt their files. After receiving an email message trying to impersonate a private video of the locally famous person, the victim is offered to download it to the system. Unfortunately, the file is additionally used to attacker's servers which are set to infect the system with numerous viruses. One of these threats is the latest version of Gandcrab.
If you happen to receive an email offering you allegedly private files, ignore it! Read more:

'Love letter' spam campaign returns just before Valentine's Day. 'Love Letter' spam campaign is based on phishing tactics that include emails from malicious actors filled with

22/01/2019

Beware! Djvu ransomware keeps spreading around and can be called one of the most popular viruses of January 2019. After being detected in December 2018, it has been posing a serious danger to its victims by using 13 different extensions to mark encrypted files.
Virus success lies in its distribution - the most of its copies have been downloaded together with cracks and adware. It's a totally new way to infect unaware users who have always been interested in using illegal copies of legitimate software. Fortunately, some of Djvu virus versions are already decryptable, so you have a chance to recover your files. Read more:

Djvu ransomware is a data locking malware that uses a variety of file extensions, including .tfude, .pdff and .tro. Djvu ransomware, also known as .djvu

30/09/2018

Facebook hacked! Several days ago, the company announced about the attack which was initiated because of 3 bugs found in "View as" feature. Know more:

3 bugs found in the 'View As' feature put around 50 million Facebook users' accounts at risk. Just several days ago, the Facebook team announced a successful

28/09/2018

Emotet is on the rise! After starting actively in 2014 as a banking trojan, the malware has become a serious threat distributor. The main targets are considered organizations from all around the world.
Once inside the system, Emotet doesn't wait and executes the module set to spread the threat to machines on the network. This module contains a list of brute-force passwords. In addition to that, Emotet can spread via spam emails by using standard social engineering techniques employed to create emails with subject lines like Invoice or Order information. These emails usually include a malicious link or file attachment with direct payload or executable that infects the system with Trojan.Emotet.
At the moment, the virus keeps spreading around the globe and infects numerous organizations each hour. A full analysis of this threat is provided here:

Emotet virus - a dangerous banking trojan that can install Dridex and Qakbot malware to the affected machines. Emotet virus is a banking Trojan that is

27/07/2018

GandCrab ransomware is considered to be the most active ransomware virus of the first half of 2018. Since its appearance on January 2018, its developers have presented five different versions that are using the same pattern to infect systems.
Once inside the target computer, Gandcrab encrypts target files and makes them unusable. As a result, the victim is asked to pay the ransom in exchange for the decryption key.
It is still unknown how much money has been collected by virus developers, but their recent activity makes us guess that people cannot face up the loss of their data. However, making a payment does not guarantee a full recovery of your encrypted data. If infected, perform these steps and remove Gandcrab at first. Additionally, try data recovery methods given in this guide:
https://www.2-spyware.com/remove-gandcrab-ransomware.html

10/07/2018

You may need to reset Chrome to its default state after being hijacked by adware, hijacker or similar virus. To help you with this task, we prepared a video guide including 5 different methods to reach this goal.

05/07/2018

Reset Safari browser by using three different methods. The first option requires clearing browsing history. Alternatively, refresh your web browser by eliminating caches or remove malicious extensions. The full guide to Safari reset: https://www.2-spyware.com/how-to-reset-safari

14/05/2018

The summer is here, and you might be interested in getting new sunglasses. Undoubtedly, you want to shop on sale and take advantage of the decent discount. However, do not get tricked by all great Ray Ban offers you see on social networks because bright sunny days have brought scammers to the digital daylight too.
This season scammers aimed at Instagram users and started offering them Ray Ban sunglasses for a ridiculously small price. However, we can ensure you that the popular brand is not giving its stylish accessory almost for free. Hence, if you are tagged in the picture which promises 90% discount, just remove the tag and report the account to Instagram (click three vertical dots in the user’s account and choose “Report” option from the menu).
The Instagram Ray Ban scam spreads with the help of fake accounts that tag random people to the promotional post. Typically, these images include links to shopping sites that imitate the official Ray-Ban website. However, they are created for stealing your credit card information and other sensitive data instead of giving you a new accessory.
Find more information about this Instagram scam:

Instagram virus - a group of malware targeting user's accounts. Instagram virus is a term used to describe a group of malware that circulates on

20/02/2018

Beware! GandCrab keeps spreading around the globe!
Recently, it was noticed hiding in fake emails using "Receipt Feb-[random numbers]" as the subject line and "DOC attached" as the message body.
Once inside the system, GandCrab encrypts files with .gdcb file extension and drops GDCB-DECRYPT.txt file in every folder. The ransom note claims something like that: “Welcome! We are regret, but all your files was encrypted!” It also offers checking the decryption procedure by recovering one of encrypted files and asks 1.54 DASH to unlock blocked files.
Before you start dealing with hackers, we would like to warn you that you must remove GandCrab instead. More information about this ransomware and its removal options is provided here:

GandCrab - ransomware that uses Rig and GrandSoft exploit kits to spread around. GandCrab is a file-encrypting virus which is currently spreading around with the

29/11/2017

It seems that Chromesearch.win virus is on its way to your computer! After being discovered in the middle of November, it has already showed up in Spain, Portugal, Italy and USA.
The success of this virus lies in its name and appearance - if you are inexperienced user, you may be convinced that you are dealing with an updated Chrome's version. However, this search tool has nothing in common with the famous search site: it can track your searches, show you ads in your search results and redirect you to sponsored domains.
To prevent Chromesearch.win, be careful with free software (PDF converters, video streaming software, etc.) because the main way used by this browser hijacker to infiltrate systems is bundling. Only Custom/Advanced installation modes will help you reveal the attempt to hijack your system.
If you are infected, visit 2-spyware.com and use the Search box to find Chromesearch.win removal guide.
https://www.2-spyware.com/

Spyware news, discussions, Antispyware reviews, Corrupt Antispyware list, list of harmful files and manual removal instructions of various spyware parasites can be found on site.

25/10/2017

Beware of the latest Bad Rabbit ransomware attack!
The virus which is rapidly infecting computers worldwide is believed to be a new version of Petya. At the moment, it does not use exploit kits for spreading. This time, it is a drive-by attack — gullible people are deceived into downloading this virus as a legitimate file called install_flash_player.exe.
To increase the distribution rate of their malware, the developers of Bad Rabbit hacked into several Russian media companies where they dropped this file in a form of a "useful" Adobe Flash installer.
Not surprisingly, large numbers of computer users have already been hit in Ukraine, Germany, U.S, Japan and other countries across the globe.
The full analysis of Bad Rabbit ransomware:

BadRabbit ransomware – a new heir of NotPetya/Petya.A? BadRabbit virus functions as new crypto-malware which has managed to wreak havoc in Eastern Europe. It operates