Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is 7ev3n

7ev3n ransomware stealthily infiltrates systems via malicious e-mail attachments, P2P networks, and fake software updates. After system infiltration, 7ev3n encrypts files stored on computers and adds the .r5a (or .r4a) extension to compromised files. Once files are successfully encrypted, a pop-up message is displayed providing information regarding the encryption.

Payment of a ransom is demanded in exchange for a private key, which is used to decrypt the files. If the ransom is not paid within the given time frame, the private key will be destroyed and all files will remain encrypted forever.

What is CryptXXX?

CryptXXX is ransomware-type malware distributed using the Angler Exploit Kit. Following infiltration, CryptXXX encrypts various files stored on local and mounted drives using RSA4096 - an asymmetric encryption algorithm. Thus, public (to encrypt) and private (to decrypt) keys are generated during encryption.

To the restore files, victims require the private key, which is stored on Command and Control (C&C) servers belonging to the cyber criminals. To receive the decrypter (with the private key embedded), victims must supposedly pay a ransom. In addition, CryptXXX gathers various private data (browsing details, cookies, etc.)

What is GamesCake?

GamesCake is a deceptive application identical to GamingTreasure, ArcadeTropics, GamesLagoon, and a number of other bogus programs. All (including GamesCake) offer functionality to play various Flash games, however, these false claims are merely attempts to trick users into believing that this application is legitimate.

In fact, GamesCake is categorized as a potentially unwanted program (PUP) and adware. One of the main reasons for these negative associations is stealth installation - GamesCake usually infiltrates systems without users’ consent. Users' web browsing activity is then tracked and intrusive online advertisements displayed.

What is searchswapper.com?

searchswapper.com is a fake Internet search engine claiming to enhance the web browsing experience by generating the most relevant search results. Judging by appearance alone, searchswapper.com may seem very similar to Google, Yahoo, Bing, and other legitimate Internet search engines.

Therefore, users often believe that searchswapper.com is also legitimate. Be aware, however, that developers promote this site using dubious application 'installers' that modify web browser settings without users' consent. In addition, searchswapper.com continually gathers various user/system information.

What is Aga?

Aga is another ransomware-type virus that targets Russian users and encrypts files (.doc, .jpg, ppt, .pdf, etc). During encryption, this ransomware adds the .aga extension to the name of each encrypted file (for example, a file named "sample.jpg" is renamed to "sample.jpg.aga"). A text file named "Instructionaga" is then generated.

What is GamesCrystal?

GamesCrystal is a potentially unwanted program (PUP) claiming to allow users to play various Flash games. These fake promises often trick users into believing that GamesCrystal is a legitimate app, however, that this PUP usually infiltrates systems without users’ permission.

Furthermore, GamesCrystal continually monitors users' web browsing activity and generates intrusive online advertisements. For these reasons, it is classed as adware.

What is JuicyLemon?

JuicyLemon is a ransomware-type virus that infiltrates the system and then encrypts stored files.

During encryption, this virus extends the name of each file with the ".id-[victim’s ID]_email1_support_@_juicylemon.biz_email2_provectus_@_protenmail.com_BitMessage_BM-NBRCUPTenKgYbLVCAfeVUHVsHFK6Ue2F" extension.

Two text files - "RESTORE FILES.txt" and "[victims-ID].txt" are then created and placed in each folder containing the encrypted files.

What is GamesFlight?

GamesFlight is a dubious application claiming to provide access to hundreds of Flash games. These false claims often trick users to install, however, research shows that GamesFlight is classed as a potentially unwanted program and adware.

One of the main reasons for these negative associations is stealth installation - GamesFlight often infiltrates systems without users’ permission. Following successful infiltration, GamesFlight tracks users' web browsing activity and delivers intrusive online advertisements.

What is search.kyushuplow.com?

search.kyushuplow.com is a dubious website claiming to be a legitimate Internet search engine and identical to search.javeview.com, search.epolife.com, search.listchack.com, and many others.

Developers promote this dubious site using application 'installers' that modify web browser settings without users' permission. Furthermore, search.kyushuplow.com collects various information relating to users' web browsing activity.

What is GamesLagoon?

GamesLagoon is a dubious application claiming to allow users to play various arcade Flash games. Initially, this app may seem legitimate, however, due to rogue behavior (installation without users' permission, tracking of users' web browsing activity, display of intrusive online advertisements), GamesLagoon is classed as a potentially unwanted program (PUP) and adware.