Gridinsoft security desk

Security Blog

Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.

Suspicious polyfill.io login prompt on a website.

Top story ·

Polyfill.io Login Prompt

Suspicious polyfill.io authentication prompts appeared on websites including MUJI and Toshiba pages. Here is what users and site owners should do.

Android CVE-2025-48595 Patch

Google says Android CVE-2025-48595 may be under limited targeted exploitation. Check your June 2026 security patch level and…

Steam C2 Backdoor

GoDaddy says WordPress malware hides C2 data in Steam profile comments. Check for hello-mywordl.info, injected scripts, and PHP…

Guides

View all
Fake e-Order XLS attachment.

Practical guide · 7 min read

FedEx e-Order Virus

Received or opened a FedEx e-Order Notification XLS? Learn what to do before enabling content, how to scan Windows, and how to…

Repair desk

View all

Security lab · Jun 1, 2026

Notepad++ XML File Risk

Notepad++ 8.9.6.1 fixes config.xml and shortcuts.xml code execution flaws. Learn who is affected, how to update, and what to inspect after suspicious shortcuts or archives.

Jun 1, 2026

Extension Keeps Returning?

If a browser extension keeps reinstalling itself, remove the source that restores it: sync, browser policy,…

Jun 1, 2026

VFXmed Virus Warning

Downloaded a VFXmed installer? Learn why cracked VFX software is risky, what Themida/DLL-hijack/infostealer alerts mean, and…

May 31, 2026

VectorGatewa.exe Removal

VectorGatewa.exe keeps coming back after a game download? Learn what the file means, how to remove…

May 31, 2026

Fake Adidas Fan Kit 2026 Scam

Got an Adidas Fan Kit 2026 WhatsApp link? Check why msgdeal.cc/offerwa.cc prize pages, quizzes, sharing prompts,…

May 29, 2026

Lively.Watchdog.exe Check

Lively.Watchdog.exe is usually part of Lively Wallpaper, but suspicious copies can be malware. Check the path,…

May 29, 2026

sdaCollector.vbs: Is It Safe?

sdaCollector.vbs is usually tied to Slate Digital Connect, but path, startup entry, hash, and Possible Threat…

May 29, 2026

Search1.me Redirect Fix

Search1.me redirects usually point to a browser hijacker, unwanted extension, or policy leftover. Use this cleanup…

Latest from every desk

Troubleshooting

Are FitGirl Repacks Safe?

Are FitGirl Repacks safe? Learn the real risks around fake FitGirl mirrors, HackTool and…

Troubleshooting

Is Repack-Games.com Safe?

Is Repack-Games.com safe? Treat its downloads as high risk: check the Gridinsoft score, scan…

Troubleshooting

Updatehub Pop-Ups Removal

Microservice-updatehub.cc is a browser notification spam domain. Remove its permission, check extensions and startup…

Tips & Tricks

Trojan:PowerShell/Asyncrat!rfn

What Trojan:PowerShell/Asyncrat!rfn means, why AsyncRAT is high risk, and how to clean up PowerShell…

AI Assistant

Hello! 👋 How can I help you today?