WhatsApp VBS Trap Installs Remote Access Tool
A June 2026 WhatsApp campaign sends fake business documents as .vbs files.…
OXLOADER Malware: Fake Node.js Ads Drop CastleStealer
A fake Node.js sponsored result delivered OXLOADER and CastleStealer. Learn what to…
SocGholish Malware: Fake Update Removal Guide
SocGholish, also called FakeUpdates, uses fake browser update prompts on compromised sites.…
Trojan:Win32/WinLNK.CLL!MTB
Defender detected Trojan:Win32/WinLNK.CLL!MTB in a recovery package? Check the path, scan status,…
Aviator Predictor Malware
Aviator Predictor-style apps can be used as fake crypto and crash-game tools.…
RealtekHD taskhostw.exe AutoIt Error Cleanup
Seeing an AutoIt error from RealtekHD taskhostw.exe? Line 21219 or another line…
ML/Augur Alert: False Positive or Malware?
ESET ML/Augur alert on an Edge update, installer, or unknown EXE? Learn…
CryptoBandits.A USB Clipper
Microsoft reports CryptoBandits, a USB-spread crypto clipper. Check .lnk shortcuts, ugate.exe, localhost:9050,…
DocuSign Legal Department Document Email Virus
A fake DocuSign Legal Department email delivers an ISO with a disguised…
RuntimesHost.exe Virus Cleanup
Found RuntimesHost.exe, node.exe, or a RuntimesHost_user task? Learn what it means, how…
Trojan:MSIL/Heracles: Defender Alert and Cleanup
Seeing Trojan:MSIL/Heracles or a Heracles !MTB variant in Microsoft Defender? Check the…
Trojan:Win32/Caynamer.A!ml: False Positive or Malware?
Seeing Trojan:Win32/Caynamer.A!ml in Microsoft Defender? Learn when to remove it, when a…