Virus and Spyware Removal Guides, uninstall instructions

What is yursd.xyz?

yursd.xyz is the address of a fake search engine. These dubious web search tools are commonly promoted by rogue software, classified as browser hijackers. This promotion is performed by modifying browser settings. Additionally, most fake search engines and browser hijackers monitor users' browsing activity.

As a result of the dubious methods used to spread these apps, they are also classified as Potentially Unwanted Applications (PUAs).

What is Manuals Finder?

Manuals Finder supposedly provides quick access to various popular brand manuals, however, this app is a browser hijacker which promotes hmanualsfinder.co (a fake search engine) by changing certain browser settings. Commonly, apps of this type not only modify settings but also collect data.

People often download and install browser hijackers inadvertently and, therefore, they are categorized as potentially unwanted applications (PUAs). Note that Manuals Finder is distributed with another, similar app called Hide My History.

What is .NET (Dharma)?

Discovered by dnwls0719, .NET is a malicious program belonging to the Dharma ransomware. Systems infected with this malware experience data encryption, a situation that criminals use to demand payment for decryption.

When .NET (Dharma) ransomware encrypts, all affected files are renamed according to this pattern: original filename, unique ID, cyber criminals' email address, and the ".NET" extension. For example, a file originally named "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[neural.net@tuta.io].NET" following encryption.

After this process is complete, a pop-up window is displayed and a text file ("FILES ENCRYPTED.txt") is created.

What is ExtraDevice?

The ExtraDevice application is supposedly designed to improve the browsing experience. In fact, it displays various intrusive advertisements and promotes the Safe Finder web page through akamaihd.net. This type of adware can also record information. Generally, users download and install adware unintentionally.

Therefore, ExtraDevice and other apps of this type are categorized as potentially unwanted applications (PUAs).

What is the superinterestinginfo[.]info site?

superinterestinginfo[.]info is a rogue website, which shares many similarities with rpket.pro, redbearmobilecuisine.com, allmeganews.com and countless others. It operates by redirecting visitors to other untrusted/malicious pages or presents them with dubious content.

Few users access these sites intentionally - most are redirected to them by intrusive advertisements or Potentially Unwanted Applications (PUAs). These rogue apps do not need explicit user consent to infiltrate systems. Following successful installation, they cause redirects, run intrusive ad campaigns and track browsing-related data.

What is Sonbokli?

Sonbokli is a Trojan-type malicious program. It is primarily designed to steal various sensitive/personal information. Sonbokli infections endanger device integrity and user safety. Therefore, this malware must be eliminated from the system immediately. The Sonbokli Trojan has been observed being proliferated via spam campaigns disguised as payment invoices.

What is "Covid Phishing Scam Email"?

"Covid Phishing" refers to a phishing scam claiming that recipients have been randomly selected as beneficiaries of the "COVID-19 Relief Fund".

They can supposedly receive $155,000 (US dollars). In fact, this scheme extorts personal information from the recipients, which can be misused in various ways and lead to likewise varied and serious issues. Due to increased concerns over Coronavirus/COVID-19, scammers and cyber criminals have been incorporating the pandemic into their schemes.

What is club-search.com?

club-search.com is one of many fake search engines that display results generated by other, legitimate search engines. Typically, these URLs are promoted through browser hijackers. Apps of this type promote fake search engines by changing browser settings and often track information.

Browser hijackers are categorized as potentially unwanted applications (PUAs), since most users download and install them unintentionally.

What is rpket[.]pro?

rpket[.]pro is similar to redbearmobilecuisine[.]com, afunione[.]club, rdsb2[.]club and many other rogue web pages. Generally, they redirect visitors to rogue websites or display dubious content. Typically, users do not visit these pages intentionally - they are opened by installed potentially unwanted applications (PUAs).

Furthermore, PUAs often display intrusive ads and collect browsing-related information.

What is Easy Weather Forecast?

Easy Weather Forecast is a rogue application that claims to provide various weather forecasts.

Judging on appearance alone, Easy Weather Forecast may seem legitimate and useful, however, this app is categorized as a potentially unwanted application (PUA) and a browser hijacker, since it often infiltrates computers without users' consent, promotes a fake search engine, and records various information.