LGNLCKD Virus Files of Ransomware — How to remove LegionLocker 3.0?

The Lgnlckd virus was originally discovered by virus analyst fbgwls245 , and belongs to the LegionLocker ransomware family. This ransomware encrypts all user’s data on the PC (photos, documents, excel tables, music, videos, etc), adds its specific extension to every file, and creates the LegionReadMe.txt files in every folder which contains encrypted files. Lgnlckd Virus ☝️ Lgnlckd can be correctly identify as a LegionLocker ransomware infection. Lgnlckd adds its specific “.LGNLCKD” extension to the name of every file. For example, your photo named as “my_photo...

Verizon Reward scam. How to remove that annoying page?

Verizon Reward scam is just another online fraud that targets your personal data and may be the way to inject viruses. Moreover, it usually appears after the malware injection. In that post, you will see the description of how that fraud works, and also the removal method for the virus that shows your Verizon reward scam. Describing the Verizon Reward scam Throughout the last several months, a lot of online scam pages appeared. Earlier, such pages were active, too, but since the end of January 2021, they have become extremely active. All of them look like the offer to receive a valuable prize...

⚡ CYBER SECURITY NEWS

Qlocker ransomware attacks Qnap devices

Earlier this week, information security specialist and creator of the ID-Ransomware service Michael Gillespie warned of the emergence of a new ransomware Qlocker, which attacks Qnap devices. creators of Qlocker use 7-zip and move files on Qnap devices to password protected archives. For example, files are locked at first, and the QNAP Resource Monitor displays multiple “7z” processes. When the ransomware terminates its work, the files are placed in password-protected archives with the .7z extension. To unpack them, victims will need to enter a password known only to the attacker...

“Hacked” Onetap V3 app is used to distrubute viruses

Onetap V3 is known as a cheat engine for CS:GO – one of the most popular shooters over the last decade. People use it to get the unfair advantage of other players, like in any other case of cheating in online games. Such unfair players are getting a ban from the in-game anti-cheat system. However, the user can get various viruses attempting to install the Onetap V3 on his PC. In this post, you will see the explanation of that scam, and ways to understand that someone tries to fool you. Describing the Onetap V3 app As I mentioned in the first paragraph, that program is a cheat engine for...

With the help of the Qlocker ransomware that is targeting Qnap, hackers have already received $280,000

Last week, we warned that the new Qlocker ransomware is heavily targeting Qnap NAS users. This malware infiltrates devices thanks to recently fixed critical bugs, and then places all user files in password-protected archives with the extension .7z. decrypting the data, the attackers demand to pay 0.01 bitcoin (about $557 at the time of the start of the attacks), and this is quite a bit by modern standards, when hackers extort millions of dollars from companies. According to the Bleeping Computer, the attackers’ tactics paid off: in just five days, the hackers managed to hack and encrypt...

NitroRansomware accepts payment with gift codes for Discord Nitro

Bleeping Computer reported on the ransomware NitroRansomware, which encrypts victims’ files, steals information from browsers, and then demands Discord Nitro gift codes to pay the ransom. Discord itself is free, users can purchase a Nitro subscription for $9.99 a month, which provides access to premium features including increased download size, improved emoji, animated avatars, and more. Moreover, a Nitro subscription can be applied both to your account and bought as a gift for another person. In the second case, the buyer will be provided with a URL in the format [[code]], which can...

Babuk Locker Ransomware Operators Threatened to Disclose Police Informants

The District of Columbia Central Police Department reported a hack and possible data leak after screenshots of internal files from the department’s servers were published on the website of the ransomware Babuk Locker. Now Babuk Locker ransomware operators threatened to disclose police informants. Locker operators claim to have hacked into law enforcement’s internal network and stolen 250 GB of data. On their website, the ransomware posted screenshots of various folders that were stolen during the attack. As the names suggest, these folders contain many files related to police...

Capcom was hacked through an old VPN device

In November 2020, it became known that the Japanese corporation Capcom was hacked through an old VPN device, and the attack affected the business operations of the game developer, including the operation of the email system. attack occurred in early November 2020 and affected some of the Capcom Group networks, which caused problems in the operation of a number of systems. For example, failures occurred with the already mentioned e-mail and access to file servers, but did not affect the availability of online games and the company’s sites. Parts of the corporate network appear to have...

Unwanted Programs

Wave Browser – is it safe? Remove Wave Browser now!

Wave Browser is an unwanted program that may appear in your browser. You did not likely expect its appearance, and will surely dislike its effects. Like tens of other unwanted programs, Wave Browser brings different advertisements into your browser. In that post, I will explain to you how to get rid of that disgusting program. What is a Wave Browser? That unwanted program can correctly be identified as adware. It is still classified as a potentially unwanted program, since it has a “disguise” – add-on for your web browser. Nowadays, various adware and browser hijackers are spread...

Unwanted Pop-ups

Remove Checkup01.biz Pop-up Virus — How to Remove?

Checkup01.biz pop-up alerts can appear unexpectedly, covering the subject of the page you went to or opening your web browser when you do not want it to be opened. Clicking on the Checkup01.biz ad can result in the injection of various malware or unwanted programs. In this article, you will see the manual of Checkup01.biz popups removal in several manners, and also examining your computer for extra viruses existence. What are Checkup01.biz pop-ups? Checkup01.biz popups are an outcome of adware presence. Adware is a type of malware that suggests you the pay-per-view of pay-per-click ads, which...

💡 TIPS & TUTORIALS

How to Remove Potentially Unwanted Programs

In this article, you will find out how to get rid of potentially unwanted programs. There are most likely some apps on your PC that furnish you with absolutely no convenience or use. Furthermore, some of them might result in unwanted activities on your device. These apps are called Potentially Unwanted Programs (PUP). Potentially Unwanted Programs may be nominated with a wide range of other names, crapware, adware and so on. They are unwanted and result in non-favorable consequences on your workstation. Substantial Difference Between Potentially Unwanted Programs And Malware The term malware...

Hide the Virus and Threat Protection Area in Windows 10

The Virus & Threat Protection area is one of the seven components of the Windows Defender Security Center. It tracks threats and performs scans on your workstation to maintain your device safe. It also obtains updates in order to identify the latest threats on your computer. Customers can also perform various kinds of scans and inspect the results of their past virus and threat scans. Nevertheless, the Virus and Threat Protection components can be concealed from the customers. With the administrator’s rights, you can hide this area on a system used by multiple customers. In this...

Anti-Virus warning. How to Download Attachments Deactivated in Gmail

A lot of customers are experiencing this problem after Google introduced amendments to their attachment policy, making it more strict, which can lead to past attachments being impossible for downloading. The point is to avoid accidentally downloading dangerous files on the system. Normally, the Email alerts that have a Zip file as attachments or documents with dangerous macros are blocked. Nevertheless, there are cases when the files are not really dangerous and Google still blocks them, which doesn’t let the customer download the attachment. Solution 1: Send the Email in Spam Folder...

Virus & Threat Protection Not Working in Windows Security. How to Fix?

In this post, I’ll explain what Virus & Threat Protection is in Windows 10? Also, how you can fix broken accessing this section. Windows Security is accessible via the Start menu or an icon in the system tray. It has seven sections: Virus & threat protection, Account protection, Firewall & network protection, App & browser control, Device security, Device performance & health, and Family options. 🤔 Why Virus & Threat Protection not working? The threat protection area can get hide from the users. It can also be useful as an admin if you don’t want to access...

MsMpEng.exe high CPU usage on computer

Msmpeng.exe process, or Antimalware Service Executable is one of the dozens of processes that run in the background in Windows. This one, as in can be figured out from its name, belongs to the Microsoft Defender. However, there were several instances when trojan viruses had used the name of this process to disguise themselves as a system process. In this article, you will see the detailed description of msmpeng.exe process functions, as well as the guide of detecting if this process is a counterfeit and belongs to a virus. Msmpeng.exe process description As it was mentioned, msmpeng.exe is a...

Is runservice.exe process safe?

The runservice.exe process is a task created by a ViaTech Technologies applications. To be precious, this service belongs to the license checking service LicCtrl, used by this vendor. Its function is quite easy to understand, since every program requires the license. Even if it is a free tool, its developers use free licenses that allow them to pretend to have author rights in case of conflicts. This process is needed to perform the license checking for the ViaTech products. It is quite hard to spectate it in the Task Manager, since the license checking is usually performed only once after...