Virus and Spyware Removal Guides, uninstall instructions

Crypt0r Ransomware

What is Crypt0r?

Discovered by MalwareHunterTeam, Crypt0r is categorized as malicious program, a ransomware-type virus. Like most computer infections of this type, cyber criminals use Crypt0r to encrypt data (block access to it) and make ransom demands. A ransom message can be found in a text file called "_HELP.txt".

Ransomware-type programs generally rename encrypted files by adding a new extension, in this case a unique victim ID (such as ".aqhATfjK"). For example, "1.jpg" becomes "1.jpg.aqhATfjK". Crypt0r runs a process in Task Manager, the name of which is a random string.

   
Torrent Movies Virus

What is Torrent Movies Virus?

Torrent Movies Virus is the generic name of malware that disguises itself as a video format file. In fact, it is a Windows shortcut. Cyber criminals proliferate the virus via The Pirate Bay torrent tracker, which is notorious for distribution of malware and potentially unwanted applications (PUAs).

Torrent Movies Virus is a high-risk virus that poses a significant threat to your privacy, finances, and computer safety.

   
Tro Ransomware

What is Tro?

Like most ransomware-type infections, Tro is designed to encrypt data and keep it in this state unless a ransom is paid (a decryption tool/key is purchased). This malicious program is a new variant of Djvu ransomware and was discovered by Michael Gillespie. During the encryption process, the virus displays a fake Windows Update pop-up window and disables Task Manager.

Once encryption is complete, all files are renamed by adding the ".tro" extension. For instance, "1.jpg" becomes "1.jpg.tro". A ransom message can be found in the "_openme.txt" text file.

   
Tfude Ransomware

What is Tfude?

Discovered by Michael Gillespie, Tfude is classified as a ransomware-type computer infection. This malicious program is a new variant of Djvu ransomware. Like most viruses of this type, it affects systems by encrypting stored data (blocking access to it) and keeping it in this state until victims purchase a decryption tool (in effect, pay a ransom).

The virus renames all encrypted files by adding the ".tfude" extension (updated versions use ".tfudet"). For example, "1.jpg" becomes "1.jpg.tfude". It also generates a ransom message within a text file called "_openme.txt" and disables Task Manager. During encryption, Tfude displays a fake Windows Update pop-up window.

   
Search.dolanbaross.com Redirect (Mac)

What is search.dolanbaross.com?

There are many fake search engines online, including baysearch.co, mysearches.co, and search.tapufind.com. The search.dolanbaross.com site is another example and is promoted as a search engine that provides faster searches, more accurate results, and so on. It is promoted using rogue downloaders and installers that modify browser settings.

Furthermore, most fake search engines collect browsing-related information, and thus you are advised never to use them.

   
MongoLock Ransomware

What is MongoLock?

MongoLock is a malicious program categorized as ransomware-type computer infection. Most programs of this type are designed to encrypt data (thus preventing victims from accessing it) and to make ransom demands.

This version, however, has somewhat different behavior: it infects computers, deletes data, and formats backup drives. It also generates a ransom message within the "Warning.txt" file.

   
Click-on-this.today POP-UP Redirect

What is click-on-this.today?

The internet is full of rogue websites such as click-on-this.today, most of which are very similar. Some other examples include spirationsstrated.club, clicktated.com, and hesthenhepattont.club. The click-on-this.today site redirects visitors to other deceptive or untrustworthy websites.

Most users do not visit these sites intentionally - they are redirected to them by potentially unwanted applications (PUAs) installed on the system. Generally, PUAs are installed without direct user permission. When installed, they force users to visit untrustworthy sites, deploy intrusive advertisements, and collect browsing-related data.

   
We Are Not Going To Steal A Lot Of Time Email Scam

What is "We are not going to steal a lot of time"?

"We are not going to steal a lot of time" is a typical scam proliferated by sending many threatening emails. Scammers use the emails to trick people into paying to prevent compromising material (in this case a video) being distributed. The video does not actually exist.

Note that there are many similar scam campaigns, and they should never be trusted. If you receive the "We are not going to steal a lot of time" email, the best option is to simply ignore it.

   
Hello Perv Email Scam

What kind of email is "Hello Perv"?

"Hello Perv" is one of many scam campaigns presented as a threatening, ransom demand email. In this case, cyber criminals attempt to trick people (email recipients) into believing that they have obtained compromising videos and will proliferate them unless their demands are met.

There is nothing to worry about, since all statements made by the "Hello Perv" scam are false. The best option is to ignore the statements and delete this email.

   
Pdff Ransomware

What is Pdff?

Pdff is high-risk ransomware-type virus discovered by Michael Gillespie. Immediately after infiltration, this malware encrypts most stored data and appends filenames with the ".pdff" extension. For instance, "sample.jpg" is renamed to "sample.jpg.pdff".

Pdff then generates a text file ("_openme.txt"), which contains a ransom-demand message. The file is placed in each existing folder. During encryption, Pdff displays a fake Windows Update pop-up and runs a number of processes under different names.

   

Page 1699 of 2337

<< Start < Prev 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal