Virus and Spyware Removal Guides, uninstall instructions

What is Atilla Stealer?

The Atilla Stealer program is a Remote Access Trojan (RAT) that cyber criminals use for malicious purposes, specifically, to steal various personal information.

They trick people into downloading and installing this program and then use the stolen data/information to generate revenue. Atilla Stealer runs in the system background and people who have computers infected by this RAT are usually not aware of this.

What is dz4link[.]com?

dz4Link[.]com is a URL shortener, a website designed to transform long links into short links. This website presents the opportunity for people to make money by creating these links. The site is not malicious, however, it causes various pop-up ads and redirects to other dubious, potentially malicious websites.

Furthermore, dz4Link[.]com uses various advertising networks. Therefore, websites of this type should be avoided.

What is JasperLoader?

JasperLoader is high-risk trojan-type virus designed to proliferate other malware. Malware of this type usually infiltrates systems without permission. Its presence might cause various problems (e.g., serious privacy issues, permanent data loss, etc.).

What is Advanced Password Manager?

Advanced Password Manager is a software tool, an application that is promoted as a password manager. According to the developers, it allows users to organize their passwords in one place without having to remember them.

This may seem to be a useful tool, especially for people who have many password-protected accounts, however, developers promote it using the "bundling" method. For this reason, Advanced Password Manager is categorized as a potentially unwanted application (PUA).

What is SadComputer?

SadComputer is a ransomware-type virus discovered by MalwareHunterTeam. This malware infection encrypts stored files so that develops can blackmail victims (files remain encrypted until a ransom is paid). Note that SadComputer deletes those files that are larger than the amount of memory SadComputer is capable of allocating.

During encryption, SadComputer adds the ".sad" appendix to the name of each compromised file. For example, "1.jpg" is renamed to "1.jpg.sad". Additionally, SadComputer opens a pop-up window and places a text file ("sadcomputer_note.txt") in every existing folder.

What is Browec?

Discovered by Michael Gillespie, Browec is yet another ransomware virus that belongs to the Djvu malware family. As with its predecessor, Browec encrypts stored data (thereby making it unusable) and adds the ".browec" extension to each filename. For example, "1.jpg" is renamed to "1.jpg.browec". Browec also stores a text file ("_readme.txt") in each folder.

What is "apple.com-clear[.]live"?

apple.com-clear[.]live is a scam website that is used to promote the Cleanup My-Mac application. This website displays a fake virus alert and encourages users to remove 'computer infections' by downloading and installing the aforementioned potentially unwanted application (PUA).

Generally, people do not visit apple.com-clear.live intentionally - they are redirected to it by PUAs that are already installed on their computers or web browsers. Most PUAs cause redirects to scams or other dubious sites, feed users with advertisements, and gather data relating to browsing habits.

What is vercallactont[.]com?

vercallactont[.]com is one of many, virtually identical, rogue websites. Other examples are butitereventwil[.]info, refrebrepheon[.]info, and ketintontrat[.]info. This site causes redirects to other dubious, deceptive websites or displays dubious content.

Generally, users arrive at vercallactont[.]com unintentionally - potentially unwanted applications (PUAs) installed on their systems force redirects to it. Typically, people install PUAs inadvertently. Furthermore, when installed, they deliver intrusive ads and gather data relating to users' browsing habits.

What is youtubnow[.]com?

The youtubnow[.]com websites allows users to download videos from YouTube in the .mp4 video format, or audio only in .mp3 or .webm formats. This service can be used via the website and a desktop application. Note that youtubnow[.]com is not malicious, however, downloading videos from YouTube is illegal.

Furthermore, this page uses advertising networks. Therefore, it displays pop-up and other ads, opens dubious web pages, and causes redirects that might lead to download or installation of various potentially unwanted applications (PUAs).

What is "Hiding Taxes"?

The "Hiding Taxes" scam is proliferated by sending emails to many people. Scammers behind it attempt to trick people into sending money (cryptocurrency). They threaten to proliferate information about the supposed recipient's tax evasion activity. In fact, all statements in this scam are false. Never trust these emails.