Virus and Spyware Removal Guides, uninstall instructions

What is ViewPDF?

ViewPDF is the name of an app designed to allow users to view PDF files and convert other files into this format directly from the browser.

In fact, ViewPDF is a browser hijacker that promotes the pdfsrch.com fake search engine by changing browser settings. Apps of this type are categorized as potentially unwanted applications (PUAs), since people often download and/or install them inadvertently. Furthermore, browser hijackers usually gather browsing data.

What is quarenafius[.]com?

quarenafius[.]com is a rogue website that loads dubious content or opens a number of other rogue sites. This is not the only website that operates in this way - more examples are belmonhezamil[.]pro, 2fatoffers[.]xyz and creasonsau[.]info.

These sites are usually opened by potentially unwanted applications (PUAs) installed on the browser and/or operating system, or when people click deceptive ads or visit untrusted web pages. Therefore, people do not often visit quarenafius[.]com or other similar sites intentionally. PUAs can also collect browsing data and/or serve advertisements.

What is requestfor4[.]com?

requestfor4[.]com is a rogue site sharing many similarities with belmonhezamil.pro, 2fatoffers.xyz, creasonsau.info and countless others. Visitors to the site are presented with dubious content and/or redirected to other untrusted or malicious web pages.

Access to requestfor4[.]com and similar websites is typically forced via redirects, which are caused by intrusive advertisements or Potentially Unwanted Applications (PUAs). Note that these unwanted apps do not need explicit consent to be installed onto devices.

PUAs can generate redirects, deliver intrusive ads (pop-ups, banners, coupons, etc.) and track browsing-related information.

What is Watch Online Streams App?

Watch Online Streams App is a rogue application classified as a browser hijacker. It is advertised as an app designed to allow quick access to various video streaming websites. In fact, it modifies browser settings to promote search.watchonlinestreamsapp.com, a bogus search engine.

Additionally, Watch Online Streams App has data tracking capabilities, which are employed to record information relating to browsing activity. Due to this app's dubious proliferation methods (most users install it inadvertently), it is also categorized as a Potentially Unwanted Application (PUA). Note that this app is often distributed alongside Hide My Searches, another PUA.

What is Radio Streaming Tool?

Radio Streaming Tool is advertised as an app that provides access to various online radio streaming services, however, it is categorized as a potentially unwanted application (PUA), a browser hijacker.

Radio Streaming Tool promotes search.radiostreamingtooltab.com (a fake search engine) by changing browser settings and also collects details relating to users' browsing activity. This app is installed together with another PUA called Hide My Searches. In most cases, people download and install PUAs inadvertently.

What is belmonhezamil[.]pro?

belmonhezamil[.]pro loads dubious content or redirects visitors to various other untrusted websites. In any case, do not trust this site and avoid it.

Some examples of other similar websites include 2fatoffers[.]xyz, creasonsau[.]info, and allow2continue[.]com. People do not generally visit these sites intentionally - browsers open them when potentially unwanted applications (PUAs) are installed. Most PUAs open untrusted pages, gather various browsing-related information and display advertisements.

What is Un1que?

Discovered by GrujaRS, Un1que is malicious software belonging to the IEncrypt ransomware family. This malware operates by encrypting the data of infected systems and making ransom demands for decryption tools/software. During the encryption process, each file is appended with the ".un1que" extension.

For example, a file such as "1.jpg" would appear as "1.jpg.un1que". Additionally, these files receive individual ransom files ("_readme"), containing identical messages. I.e., an encrypted file such as "1.jpg.un1que" would be associated with a text file called "1.jpg.un1que_readme".

What is Get Your Obituaries Now?

Get Your Obituaries Now is a potentially unwanted application (PUA), a browser hijacker which promotes search.getyourobituariesnowtab.com (the address of a fake search engine) by changing certain browser settings. In most cases, browser hijackers promote fake search engines and gather browsing data.

Typically, people download and install apps of this type inadvertently. Get Your Obituaries Now is installed together with another PUA called Hide My Searches.

What is CU?

CU is the name of malware belonging to the Crysis/Dharma ransomware family. Systems infected with this program have data encrypted and users receive ransom demands for file decryption.

When CU ransomware encrypts, all files are renamed according to the following pattern: original filename; unique ID assigned to the victims; cyber criminals' email address, and; the ".CU" extension. For example, a file like "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[cyberunion@tuta.io].CU".

After this process is finished, a text file ("FILES ENCRYPTED.txt") is created on the desktop and a pop-up window is displayed.

What is 2fatoffers[.]xyz?

When visited, 2fatoffers[.]xyz opens untrustworthy websites or loads dubious content. There are many other rogue websites that operate in this way including, for example, younwild[.]com, zahkit[.]pro and usinesmycete[.]info. 

Typically, people do not open them intentionally - in most cases they are redirected to them by browsers that have potentially unwanted applications (PUAs) installed. PUAs open dubious web pages, display intrusive advertisements and collect information relating to users' browsing activity.