Virus and Spyware Removal Guides, uninstall instructions

Rubly Screenlocker

What is the Rubly screenlocker?

Discovered by malware analyst Karsten Hahn, Rubly is screenlocker malware. It operates by locking the screen, displaying a full-screen window, and damaging the Master Boot Record (MBR) so that ransom demands can be made.

Rubly also claims to have encrypted the data stored on the infected system, which is a common characteristic of ransomware-type malicious programs.

   
KENS@TUTA.IO Ransomware

What is KENS@TUTA.IO?

KENS@TUTA.IO was discovered by GrujaRS and belongs to the GlobeImposter ransomware family. These programs are designed to prevent victims from accessing or using their files by encryption. They also change the filenames of all encrypted files and create and/or display ransom messages.

KENS@TUTA.IO creates the "how_to_back_files.html" file and renames affected files by appending the ".KENS@TUTA.IO" extension to filenames. For example, it renames a file named "1.jpg" to "1.jpg.KENS@TUTA.IO", "2.jpg" to "2.jpg.KENS@TUTA.IO", and so on.

   
Coupon Search Browser Hijacker

What is Coupon Search?

Coupon Search is a potentially unwanted application (PUA), a browser hijacker that promotes a fake search engine (searchforcoupons-svc.org) by changing certain browser settings to searchforcoupons-serp.org.

Commonly, browser hijackers are designed to promote fake search engines and also to track and record information. They are classified as PUAs, since people often download and install them inadvertently.

   
Update To The Latest Version Of HD Video Player POP-UP Scam (Mac)

What is "Update to the latest version of HD Video Player"?

There are many deceptive websites designed to deceive visitors into using a fake Adobe Flash Player installer, which supposedly updates the currently installed version. Typically, these bogus installers install one or multiple potentially unwanted applications (PUAs) such as browser hijackers and adware-type apps.

In some cases, they are used to infect systems with malicious software including ransomware and Trojan-type programs. In any case, fake Adobe Flash Player installers that are promoted through unofficial websites can never be trusted and should be avoided.

   
2020 Web Research Survey POP-UP Scam

What is the "2020 Web Research Survey" scam?

"2020 Web Research Survey" is a scam promoted on deceptive websites. This scheme claims that people can win a complimentary reward if they complete a short survey. Rather than receiving the promised rewards, however, users are redirected to other scam sites.

During research, the scheme redirected to various phishing websites, which steal personal information such as names, addresses, telephone numbers, emails, credit card details, etc. These sites might also request users to make fake shipping, registration, subscription fees, or similar payments.

Few users access deceptive/scam websites intentionally - most are redirected to them by intrusive ads or Potentially Unwanted Applications (PUAs) already installed on the system.

   
SearchAnything Browser Hijacker

What is SearchAnything?

SearchAnything (also known as Search Anything) is an application designed to customize the browser and improve the browsing experience. In fact, it is a browser hijacker that promotes searchanything.co (the address of a fake search engine) by changing hijacked browser settings.

Furthermore, it can access and record information relating to users. Typically, apps of this type target browsing data. In most cases, users download and install apps such as SearchAnything (browser hijackers) inadvertently. Therefore, they are classified as potentially unwanted applications (PUAs).

   
Templates Here Tab Browser Hijacker

What is Templates Here Tab?

Templates Here Tab is a rogue application categorized as a browser hijacker. It is endorsed as a tool for easy access to various templates. Following successful installation, however, it modifies browser settings to promote hp.htemplateshere.co (a fake search engine).

This app can also track browsing-related information. Since most users download/install this app inadvertently, it is classified as a PUA (Potentially Unwanted Application). Note that Templates Here Tab is often distributed together the Hide My Searches PUA.

   
ActiveTrack Adware (Mac)

What is ActiveTrack?

ActiveTrack is an application from the AdLoad adware family. It is designed to display advertisements, promote a fake search engine, and might also operate as an information tracking tool. This application is partly adware and partly a browser hijacker.

People often download and install apps of this type inadvertently and, therefore, they are classified as potentially unwanted applications (PUAs). Note that ActiveTrack is distributed through a fake Adobe Flash Player installer.

   
.google Ransomware

What is .google ransomware?

.google (also known as GoGoogle) ransomware is a malicious program designed to encrypt data and demand ransom payments for decryption. This malware has no connection to Google LLC. During the encryption process, all affected files are renamed according to this pattern: original filename, unique ID, cyber criminals' email address and the ".google" extension.

For example, a file originally named "1.jpg" would appear as something similar to "1.jpg_ID_512064768_Bossi_tosi@protonmail.com.google" following encryption. After this process is complete, a ransom message within the "FireRecovery.txt" file is created.

   
ValueKnow Adware (Mac)

What is ValueKnow?

ValueKnow is a potentially unwanted application (PUA) classified as adware. Generally, adware-type applications generate revenue for the developers by feeding users with advertisements. This particular app is also capable of accessing and collecting various information.

It promotes the Safe Finder website by opening it through akamaihd.net. ValueKnow and other similar apps are classified as PUAs, since people tend to download and install them unintentionally.

   

Page 1399 of 2329

<< Start < Prev 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal