Virus and Spyware Removal Guides, uninstall instructions

What is "Christmas Greetings Email Virus"?

"Christmas Greetings Email Virus" is one of many spam email campaigns used by cyber criminals (scammers) who seek to trick recipients into opening the included attachment. This particular scam is used to distribute Emotet, a malicious program that steals data. You are strongly advised to ignore this and other similar scams.

What is "Services which actually i sell in darknet"?

There are many spam email campaigns that are used to scam people and extort money from them. A common example is the sextortion-type scam: scammers send emails claiming that they have obtained (taken/recorded) compromising photos or videos and threaten recipients that they will proliferate the material if their ransom demands are not met.

Note, however, that "Services which actually i sell in darknet" is a different type of scam. The person (scammer) behind it, sends a threatening email stating that action (which is not clearly unexplained) will be taken against the recipient if the ransom is not paid. Note that there is a similar scam to this called Hidden Bomb In The Building.

What is "Y.E DESIGN Email Virus"?

Cyber criminals use the "Y.E DESIGN Email Virus" spam email campaign to spread the Emotet malicious program, a high-risk virus infection designed to steal sensitive/personal information and proliferate other infections.

Criminals send many emails that contain a malicious attachment - once opened (executed), the file installs the aforementioned Emotet virus. We strongly recommend that you ignore this and other similar emails.

What is Null?

Null [specifically, "(null)[random_characters)"] is the faulty URL of the homesweeklies.com fake search engine. The site supposedly enhances the browsing experience by allowing users to search and enjoy improved results.

Initially, this functionality may seem legitimate and useful, however, the website does not work - it simply displays an error page, rather than any search engine. Developers promote the site using deceptive software installers designed to hijack browsers and modify options without users' consent.

What is "LamePyre"?

Discovered by malware security researcher, Adam Thomas, the LamePyre virus claims to be communication software called Discord (designed for video gaming communities). In fact, LamePyre is a high-risk trojan capable of opening a system backdoor, capturing screenshots, and then sending them to a remote server.

What is "Looked at you for several months"?

"Looked at you for several months" is a scam (a spam email campaign) used to trick recipients into believing that anonymous hackers have recorded a compromising/humiliating video and will proliferate it if their ransom demands are not met. In fact, there are hundreds (or even more) similar spam campaigns online -  all should be ignored.

Scammers send these emails to thousands of people in the hope that some will be tricked. Note: this email is sent using the "email spoofing" method. In this way, scammers falsify the sender's address, thus making it seem as if the recipient was also the sender.

What is WORMCRYPT0R?

Discovered by Michael Gillespie, WORMCRYPT0R is a high-risk ransomware-type malicious program. When a computer is infected by this program, it encrypts files, thereby rendering them unusable. To retrieve their files, WORMCRYPT0R victims are encouraged to buy a decryption key from from the developers (this is effectively paying a ransom).

All encrypted files are renamed by adding the ".WORMCRYPT0R" extension. For example, "1.jpg" becomes "1.jpg.WORMCRYPT0R". A ransom message is provided in the "WORMCRY.txt" file, which can be found in every folder containing encrypted files.

What is miksearch.club?

miksearch.club is a fake search engine that is promoted as if it is legitimate and capable of providing an enhanced browsing experience (more accurate search results, faster searches, and so on).

This may seem to be a useful search engine, however, miksearch.club is promoted using rogue download/installation set-ups that modify browser settings and record browsing-related data.

What is "Christmas Day Bonus Gift Email Virus"?

"Christmas Day Bonus Gift Email Virus" is a spam campaign used to trick people (email recipients) into clicking the displayed website link. Clicking this link leads to a computer infection called Ursnif, a trojan-type computer infection designed to record various sensitive data. We advise you not to open the link presented in this scam - the best option is to simply ignore it.

What is "PDF King"?

The PDF King app allows conversion of various documents into PDF format, and also to convert them back from previous formats and merge multiple PDF documents into one.

Developers promote this app as the most comprehensive PDF converter available, however, PDF King is categorized as a potentially unwanted application (PUA), since it is promoted using the "bundling" method, and thus many users install it inadvertently.