Broom Cleaner App (Virus Removal)
Broom Cleaner is an unwanted program that at first glance seems to be a safe tool for cleaning and optimizing your computer. However, in reality, once installed, it performs unwanted changes to system settings,...
Threat research notebook
Gridinsoft Security Lab
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
309 lab recordsHunt Ransomware ([email protected])
Hunt ransomware is a new sample of the Dharma/CrySis ransomware family that appeared on April 5,...
GoFetch Vulnerability in Apple Silicon Uncovered
Researchers uncovered a vulnerability in Apple Silicon processors, dubbed GoFetch. It allows attackers to extract secret...
Dragon Angel Malicious Browser Extension
Dragon Angel is a browser extension that functions as a hijacker malware. It redirects users to...
Research log
Taskbarify Unwanted Application
Taskbarify is unwanted software (like a Movidown)that claims it is a tiny little Windows tweaker. However, it also turns the device into a proxy...
Is uTorrent Safe? PUABundler:Win32/uTorrent_BundleInstaller
Is uTorrent safe? Learn what the PUABundler:Win32/uTorrent_BundleInstaller alert means and how to remove bundled offers, fake installers, and leftovers.
WingsOfGod.dll – WogRAT Malware Analysis & Removal
WogRAT, also known as WingsOfGod RAT, is a novice remote access trojan that attacks users from Asian countries. Named after its own file –...
PUABundler:Win32/FusionCore
PUABundler:Win32/FusionCore is a designation that Microsoft Defender Antivirus uses to detect and remove potentially unwanted programs (PUP) that are spread by bundling technology. FusionCore...
Trojan:Script/Sabsik.FL.A!ml: What It Means and Removal
Trojan:Script/Sabsik.FL.A!ml is a Defender script Trojan alert. Check the file path, source, false-positive risk, and cleanup steps before restoring it.
Backdoor:Win32/Bladabindi!ml Removal Guide
Backdoor:Win32/Bladabindi!ml is a Defender alert for Bladabindi/njRAT. Learn what to do if it appears in Recycle Bin, when not to restore it, and how...
PUA:Win32/PCMechanic – PC Mechanic Plus Removal Guide
PUA:Win32/PCMechanic is a detection associated with the potentially unwanted application. This pseudo system optimizer claims that the user’s system has many problems, and then...
Trojan:Script/Ulthar.A!ml: What It Means and Removal
Trojan:Script/Ulthar.A!ml is a Defender script alert. Check the file path, source, false-positive risk, and cleanup steps before restoring it.
Bitfiat Process High CPU – Explained & Removal Guide
Bitfiat is a malicious coin miner that exploits your computer's hardware to mine cryptocurrencies. Such malware takes as much resources as it can, making...
Trojan:Script/Phonzy.A!ml and B!ml: False Positive or Malware?
Trojan:Script/Phonzy.A!ml and B!ml are Microsoft Defender family detections. Check the affected path, archive/cache versus execution, false-positive evidence, recurring alerts, and safe cleanup.
SYSDF Ransomware (.SYSDF Files) – Malware Analysis & Removal
SYSDF is a ransomware-type program that belongs to the Dharma malware family. Such malicious software aims mainly at small companies, aiming at file encryption...
Vmmem/VmmemWSL High Memory Fix: WSL, Docker, Windows 11
Vmmem or VmmemWSL high memory usually points to WSL2, Docker, Hyper-V, Windows Sandbox, or an emulator. Learn how to stop it safely, set .wslconfig...
Fake ChatGPT Apps
Fake ChatGPT apps now include polished desktop-download scams such as openew.app, Chat_GPT.exe, and ChatGpt.dmg. Learn what to check and how to clean up safely.
Ov3r_Stealer Steals Crypto and Credentials, Exploits Facebook Job Ads
A new Windows malware called Ov3r_Stealer is spreading through fake Facebook job ads, according to a report by Trustwave SpiderLabs. The malware is designed...
Tax Season Scams On The Rise, Beware!
Tax season has already begun, and so did tax season scams. The IRS annually lists its top tax scams to help taxpayers protect themselves....
Mispadu Banking Trojan Exploits SmartScreen Flaw
Recent research uncovers a new sample of Mispadu malware that uses a SmartScreen bypass flaw to integrate itself into the system. This banking trojan...