LinkedIn Purchase Inquiry Email Scam
The LinkedIn Purchase Inquiry email scam imitates a business quote request to steal credentials. Learn the red flags, safe verification steps, and what to do if you clicked.
Adobe Acrobat Secure Document Email Virus
Fake Adobe Acrobat Secure Document and Contract Procurement emails can deliver trojanized ScreenConnect. Check the ZIP/MSI lure and clean up safely.
ScreenConnect Client Scam: Remove Unexpected Remote Access
Found ScreenConnect Client or ConnectWise Control after a call, email, or fake update? Stop remote access, remove the service, scan with Gridinsoft, and secure accounts.
Friends Ransomware: .friends124 File Recovery Guide
Friends ransomware appends the .friends124 extension and drops RANSOM_NOTE.html. Learn how to isolate the PC, protect backups, check decryptors, and recover safely without trusting ransom promises.
Social Security Statement Email Scam Uses ScreenConnect
A June 2026 fake Social Security Statement email used a t.co link, a fake PDF update page, and ScreenConnect.ClientSetup.exe. See the IOCs and what to do if you ran it.
Hommy Ransomware: .hommy File Recovery Guide
Hommy ransomware adds the .hommy extension and leaves +README-WARNING+.txt. Isolate the PC, preserve files, check decryptor options, and clean malware before restoring.
RealtekHD taskhostw.exe AutoIt Error Cleanup
Seeing an AutoIt error from RealtekHD taskhostw.exe? Line 21219 or another line can point to fake RealtekHD persistence; here is how to remove it.
ML/Augur Alert: False Positive or Malware?
ESET ML/Augur alert on an Edge update, installer, or unknown EXE? Learn when it may be a false positive, when to remove it, and how to verify before restoring.
Win32:Malware-gen / Other:Malware-gen: False Positive or Malware?
Seeing Win32:Malware-gen or Other:Malware-gen on cmd.exe or another file? Learn when it is a false positive, when to clean up, and what to check first.
CryptoBandits.A USB Clipper
Microsoft reports CryptoBandits, a USB-spread crypto clipper. Check .lnk shortcuts, ugate.exe, localhost:9050, scheduled tasks, and wallet-address changes.
FedEx Shipping Labels/Documents In PDF Format Email Scam
A fake FedEx shipping-documents email may attach an HTML file or point to a fake login page instead of a real PDF. Here is how to verify FedEx or DHL…
cPanel Email Quota Limit Scam: Webmail Phishing Checklist
The cPanel, Roundcube Security Patches, Employee Account Maintenance Notice, and other Webmail phishing emails steal mailbox credentials. Learn red flags and recovery steps.
