Virus and Spyware Removal Guides, uninstall instructions

Apple.com-scan.live POP-UP Scam (Mac)

What is "apple.com-scan[.]live"?

apple.com-scan[.]live is a scam website designed to trick people into downloading a potentially unwanted application (PUA) called Cleanup-My Mac. The site displays a fake virus alert stating that the Mac computer is infected with some viruses that should be removed immediately.

This website (or apps promoted though it) should not be trusted. Typically, apple.com-scan[.]live is visited when people are redirected to it by PUAs already installed on their systems. These apps usually feed users with advertisements and gather information relating to their browsing habits.

   
Proof Attached Email Scam

What is "Proof attached"?

"Proof attached" is the name of a spam email campaign that is categorized as a 'sextortion' scam. Generally, scams of this type are used to scare people (recipients) and trick them into believing that scammers have recorded a compromising video (or taken photos) and will proliferate the material unless recipients pay a specific sum.

In summary, this scam is used to extort money from people and we strongly recommend that you ignore the emails.

   
Btix Ransomware

What is Btix?

Discovered by Jakub Kroustek, Btix is yet another variant of high-risk ransomware called Dharma. As with its predecessor, Btix encrypts stored data and appends the names of compromised files with the ".btix" extension plus the developer's email address and victim's unique ID (e.g., "sample.jpg" might be renamed to a filename such as "sample.jpg.id-1E857D00.[encrypt11@cock.li].btix").

In addition, Btix opens a pop-up window and places a text file ("FILES ENCRYPTED.txt") on the desktop.

   
Seon Ransomware

What is Seon?

Seon is malicious software categorized as ransomware and designed to block access to data (via encryption) until a ransom is paid. This computer infection was discovered by Anti-malware vigilante. Seon renames each encrypted file by adding the ".FIXT" extension.

For example, "1.jpg" becomes "1.jpg.FIXT", and so on. It also displays two ransom messages: one in a pop-up window, the other within a text file called "YOUR_FILES_ARE_ENCRYPTED.TXT".

   
Feed.searchfrit.com Redirect

What is feed.searchfrit.com?

feed.searchfrit.com is one of many dubious, fake search engines on the internet. This site supposedly provides users with faster searches, improved results, and various other features, however, it is promoted using a potentially unwanted application (PUA) called Search Genie.

This dubious app is a browser hijacker that modifies browser settings and collects data relating to users' browsing habits.

   
Speeder.biz POP-UP Scam

What is "speeder.biz"?

speeder.biz is a deceptive website designed to trick people into believing that they can obtain a smartphone free of charge. This is a scam website and should not be trusted.

Typically, people do not visit websites of this type intentionally - they are opened by installed potentially unwanted applications (PUAs) installed on their system. Most PUAs also gather information and deliver advertisements.

   
Refols Ransomware

What is Refols?

Refols is a malicious program that belongs to the Djvu ransomware family. Generally, cyber criminals use ransomware-type programs to prevent victims accessing data stored on their computers by locking them with strong encryptions. They also use them to blackmail people by urging them to pay a ransom for release of their data.

Refols renames all encrypted files by adding the ".refols" extension to their filenames. For example, "1.jpg" becomes "1.jpg.refols". It also creates a text file called "_readme.txt" containing a ransom message.

   
Rescoms Malware

What is Rescoms?

Rescoms is a new version of Remcos RAT. This program is a Remote Access Tool (RAT) and can be used by anyone for legitimate purposes, however, many cyber criminals use it to generate revenue in malicious ways.

They attempt to trick people into installing these programs on their computers using spam campaigns that send emails with attachments. Once opened, these attached files download and install malicious programs (in this case, the Rescoms RAT).

   
Undrabbifor.info POP-UP Redirect

What is undrabbifor.info?

undrabbifor.info is a rogue website designed to redirect users to other compromised sites and deliver dubious content. It is very similar to tontritrattof.infomoocauby.comredrentalservice.com, and many others. Users typically visit this website inadvertently - they are redirected by potentially unwanted applications (PUAs) or intrusive advertisements displayed on other rogue sites.

PUAs are notorious for infiltrating computers without permission. As well as causing redirects, they usually deliver intrusive advertisements and gather information.

   
Qbit PC Speedup Unwanted Application

What is Qbit PC Speedup?

The Qbit PC Speedup program is promoted by its developers as a computer optimization tool. It supposedly ensures that computers run smoothly, fast, and without errors, however, Qbit PC Speedup is classified as a potentially unwanted application (PUA).

Developers promote this app using a deceptive marketing method called "bundling". Therefore, it is usually installed unintentionally without users' knowledge.

   

Page 1643 of 2329

<< Start < Prev 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal