Computeradszone.com prompts users to allow its notifications
What Is Computeradszone.com?
Computeradszone.com is a dubious website which attempts to trick users into subscribing to its browser notifications. The site may tell users that they have to click Allow on its notifications confirmation pop-up box if they want to watch a video, access a page, prove that they are not bots, etc. If a user clicks Allow, Computeradszone.com notifications will begin popping up periodically on the right side of the screen and spamming the user with ads, links to shady websites, fake alerts, scammy messages, etc.READ MORE
The MSDT exploit is a dangerous vulnerability in Microsoft Windows that allows hackers to perform “remote code execution”. In layman’s terms – this means that the MSDT exploit allows hackers to do anything they want with your computer. Maybe they’ll mine cryptocurrency, maybe they’ll steal your accounts, maybe they’ll install a ransomware program… anything is possible. It affects all modern Windows versions – Windows 7 and the newer versions are all vulnerable.
The exploit allows hackers to corrupt .docx and .rtf files (text documents), as well as Windows shortcuts, in such a way that it allows them to control your computer. This is done through a vulnerability in Microsoft Support Diagnostic Tool (MSDT), which is why it is called the MSDT exploit. In case of .docx files and shortcuts, the hacker needs the victim to open the file. However, .rtf files are even more dangerous – simply clicking on the file once, without opening it, is enough to be hacked.
Note that Microsoft Support Diagnostic Tool by itself is not dangerous. However, you should never see the window on the image above unless you’re interacting with Microsoft Support. If you saw this window randomly appear, or appear after you’ve opened a file – you’ve been infected.
This vulnerability is also known as Follina, and in the cybersecurity world, as CVE-2022-30190 and Mesdetty. So if you’ve heard one of these names – these are all just different names for this vulnerability.
Although this is a very serious flaw in Windows’s security, it can be easily fixed. This article will teach you how to fix MSDT exploit so you can be safe from the hackers trying to use this vulnerability.
Nnuz is a virus that encrypts every file on the infected computer. This is not done out of pure malice – the cybercriminals then offer to decrypt your data for a significant sum of money. This behavior has earned Nnuz, as well as every other malicious program that behaves in this fashion, the name of ransomware. Many different “families” of ransomware exist – all viruses within one family are essentially the same virus, with only minor differences between each other. Nnuz belongs to the STOP/Djvu ransomware family – you can read our articles on Zfdv or Ribd, other viruses in this family, to see just how similar they are to each other.
The encrypted files are given the .nnuz extension, so that the victim can see that something is wrong with their files. Once it’s done encrypting the files, Nnuz creates a file named “_readme.txt” on the victim’s desktop. This file is a ransom note – the image above contains its text. It demands $980 to restore the data, or $490 if paid within the first 72 hours after infection.
Our article will help you deal with this threat. It will explain how to remove Nnuz ransomware, and will tell you what you can do to decrypt .nnuz files.
LV ransomware (also known as 0nzo8yk ransomware) is a modified version of another ransomware program, REvil. The ultimate goal of any ransomware virus is to generate money for the cybercriminals. This is done via ransom – LV (as well as every other ransomware program) encrypts the victim’s data and demands a payment to decrypt them.
LV’s ransom note is called “EDGEWATER-README.txt”, which you can read on the image above. One thing is absent from this note, and that is price. The price varies depending on the profile of the victim, so the hackers are using their Tor website to communicate this information (see example). This is important because it means that LV most likely focuses on a small number of valuable targets such as companies. This does not rule out the possibility of private individuals being targeted with LV – they could be targeting both.
Either way, this guide will show you how to remove LV ransomware from your computer, and will give you tips on how to decrypt .0nzo8yk files.
Mellina-blog.com prompts users to allow its notifications
What Is Mellina-blog.com?
Mellina-blog.com is a dubious website which attempts to get users to click or tap Allow on its “Show notifications” pop-up box. Mellina-blog.com may tell users that they have to click Allow if they wish to access a webpage, download a file, prove that they are not robots, or for another reason. Should a user click Allow, Mellina-blog.com notifications will begin showing up time and again in the top-right or bottom-right corner of the screen and spamming the user with ads, links to untrustworthy websites, software offers, fake alerts from the operating system, etc.READ MORE
Zfdv is a new strain of the STOP/Djvu ransomware. For this reason, it is very similar to other ransomware programs in this family, such as Ribd or Ygkz. Ransomware, as you probably already know, is a class of illegal programs that make hackers money by encrypting files and asking for payment to decrypt them.
Zfdv in specific asks for $980, though the ransom note also states that victim who act quickly will get a 50% discount and will only have to pay $490. This, too, is typical for STOP/Djvu. Speaking of the ransom note, it is called “_readme.txt”, and is placed on the Desktop. For those that are interested in details, the image above contains the full text of the note – though once you’ve seen one STOP/Djvu ransom note, you’ve seen them all.
When Zfdv encrypts the files, is also changes the files’ extensions. Many ransomware programs do this, presumably to make it more evident to the victim that an attack has happened. The files Zfdv encrypts are given the extension .zfdv – hence the name.
The “good” thing about being infected with Zfdv is that STOP/Djvu is a well-known ransomware family that is relatively easy to get rid of. This article will explain how to remove Zfdv from your computer and how you can try to decrypt .zfdv files.
Advnottech.com prompts users to allow its notifications
What Is Advnottech.com?
Advnottech.com is a shady website which attempts to trick users into accepting its notifications request. Advnottech.com may tell users that they have to allow its notifications if they want to watch a video, access a page, verify that they are not robots, etc. If a user allows notifications from Advnottech.com, the notifications will begin popping up from time to time in the top-right or lower-right corner of the screen with ads, clickbait links, software offers, fake alerts, etc.READ MORE
Renew-search.com is a dubious site that you may keep getting redirected to if you have Renew Search extension installed on your computer. Renew Search may also inject extra ads on webpages that you visit or redirect you to various shady websites. Extensions that show users ads are called adware, and extensions that redirect users’ searches to promoted sites are called browser hijackers. Browser hijackers and adware may end up on a computer after a user installs a free or cracked program or runs a file downloaded from an untrustworthy source. This step-by-step guide will help you remove Renew Search extension and renew-search.com redirect from your browser.READ MORE
Compelling Entry is a browser hijacker that may end up on a Macbook after a user installs a free program or a cracked application, or launches a file downloaded from an untrustworthy source. A browser hijacker is a piece of software that can alter Start Page, New Tab Page or Search Engine on browsers and stop users from changing those settings again. Compelling Entry sets the search engine on Google Chrome to a fake search engine which redirects all search queries to Yahoo and Bing. You may follow this step-by-step guide to remove Compelling Entry from your Mac and restore your favorite search engine.READ MORE
Waterdating.top prompts users to allow its notifications
What Is Waterdating.top?
Waterdating.top is one of many questionable sites that try to trick users into accepting notifications from those sites. Waterdating.top may tell users that they need to click or tap Allow on its “Show notifications” pop-up box if they wish to access a page, view a video, confirm that they are 18+, or for another reason. Should a user click Allow, Waterdating.top notifications will start appearing from time to time on the right side of the screen and spam the user with ads, links to shady sites, software offers, fake messages, etc.READ MORE
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.OkPrivacy policy
![LV's ransom note:
---=== Welcome. Again. ===---
[+] What's Happened? [+]
Your files have been encrypted and currently unavailable. You can check it. All files in your system have 0nzo8yk extension. By the way, everything is possible to recover (restore) but you should follow our instructions. Otherwise you can NEVER return your data.
[+] What are our guarantees? [+]
It's just a business and we care only about getting benefits. If we don't meet our obligations, nobody will deal with us. It doesn't hold our interest. So you can check the ability to restore your files. For this purpose you should visit our website where you can decrypt one file for free. That is our guarantee.
It doesn't metter for us whether you cooperate with us or not. But if you don't, you'll lose your time and data cause only we have the private key to decrypt your files. In practice - time is much more valuable than money.
[+] How to get access to our website? [+]
Use TOR browser:
1. Download and install TOR browser from this site: https://torproject.org/
2. Visit our website: http://4to43yp4mng2gdc3jgnep5bt7lkhqvjqiritbv4x2ebj3qun7wz4y2id.onion
When you visit our website, put the following data into the input form:
Key:
[REDACTED]
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software or antivirus solutions to restore your data - it may entail the private key damage and as a result all your data loss!
!!! !!! !!!
ONE MORE TIME: It's in your best interests to get your files back. From our side we (the best specialists in this sphere) ready to make everything for restoring but please do not interfere.
!!! !!! !!](https://www.computips.org/wp-content/uploads/2022/06/how-to-remove-lv-ransomware.png)
