Beware these free tools – they may be hiding ransomware