Virus and Spyware Removal Guides, uninstall instructions

What is the fake "Banco Montepio" email?

"Banco Montepio email scam" refers to a spam campaign, designed to extract recipients' banking credentials (i.e. usernames and PIN codes / passwords). The term "spam campaign" is used to define a mass-scale operation, during which thousands of deceptive emails are sent.

The messages distributed through this spam campaign, inform recipients that unusual transactions have been detected on their banking accounts and they must update account security to prevent them from being suspended.

These scam emails are disguised as notifications from Banco Montepio, a Portuguese banking and mutual savings organization. In fact, the fake messages are in no way associated with the Montepio bank.

The goal of this scam is to trick users into attempting to log-in to their banking accounts via a link provided in the emails, which leads to a phishing website.

What is emindeed[.]top?

emindeed[.]top is similar to sionremai[.]fun, thehugefeed[.]com, titionasses[.]fun and many other pages. Typically, users do not visit these sites intentionally - they are opened by browsers that have potentially unwanted applications (PUAs) installed on them. They are also promoted via other dubious web pages or deceptive advertisements.

What is the "Email Security Alert" message?

"Email Security Alert" refers to the subjects/titles of deceptive emails. These messages claim that recipients must update their email account security. The link users are to click to update their accounts redirects to a phishing website designed to steal email account passwords, thereby gaining access to the accounts.

Note that all of the information provided by "Email Security Alert" scam messages is false.

What kind of scam campaign is "E-Mail Clustered"?

Commonly, scammers use bogus emails to trick recipients into providing personal, sensitive information such as credit card details, login credentials for various accounts, etc. They often attempt to do so by disguising their emails as official, important messages from legitimate companies and organizations.

This particular scam is disguised as a message from an email service provider and is used to to trick recipients into providing their email account login credentials.

What is PyMICROPSIA?

PyMICROPSIA is an information-stealing Trojan built with the Python programming language and related to the MICROPSIA malware family. It can be used to collect data and remotely control infected machines via a Command and Control (C2) server.

PyMICROPSIA is powerful malware, which should be uninstalled from infected computers immediately.

What is Easy Searching App?

Easy Searching App is a browser hijacker designed to promote keysearchs.com (a bogus search engine). Typically, software of this type operates by making alterations to browser settings to promote fake search engines, however, Easy Searching App does not necessarily operate in this way (see below).

Note that this app collects browsing-related information and, due to the dubious techniques employed to proliferate browser hijackers, it also classified as a Potentially Unwanted Application (PUA).

What is sionremai[.]fun website?

sionremai[.]fun is a rogue web page designed to present visitors with dubious material and/or redirect them to other untrusted or possibly malicious sites. The internet is rife with these sites - thehugefeed.com, titionasses.fun, and rymothere.fun are just some examples.

Typically, users enter websites of this kind unintentionally. Most are redirected to them by intrusive ads or by Potentially Unwanted Applications (PUAs) already installed on their systems. This software operates by causing redirects, running intrusive advertisement campaigns, and collecting browsing-related information.

What is Kobos ransomware?

Discovered by malware researcher Ravi, Kobos is a ransomware-type program. Systems infected with these programs experience data encryption and users receive ransom demands for decryption.

During the encryption process, affected files are renamed following this pattern: original filename, unique ID assigned to the victims, cyber criminals' email address, and the ".kobos" extension. For example, a file originally named "1.jpg" would appear as something similar to "1.jpg.id-C279F237.[ArtemisDC@keemail.me].kobos" after encryption.

Once this process is complete, ransom messages within "## HOW TO RECOVER ##.hta" files are dropped into compromised folders.

What is One Click Privacy?

One Click Privacy is advertised as a program that helps users to keep their online privacy safe, however, it is distributed by using dubious methods. I.e., it is likely that some users have already downloaded and installed One Click Privacy inadvertently (or might do so in future).

Programs that users download and/or install inadvertently are classified as potentially unwanted applications (PUPs) or potentially unwanted applications (PUAs).

What is "ERROR #DW6BD36" scam?

This is a technical support scam website created by scammers who attempt to trick visitors into calling the provided number. Typically, scammers behind these web pages seek to extort money from unsuspecting users by tricking them into paying for unnecessary services and software.

In some cases, scammers ask users to provide remote access to their computers. Therefore, you should avoid these websites, which are not often visited intentionally by people.