Virus and Spyware Removal Guides, uninstall instructions

NMoreira Ransomware

What is NMoreira?

NMoreira is a ransomware-type virus identical to AiraCrop and related to Team XRat. This ransomware infiltrates the system and encrypts files using asymmetric cryptography. During encryption, NMoreira appends names of encrypted files with the ".maktub" extension (this is unrelated to Maktub ransomware).

Following successful encryption, NMoreira creates a text file ("Recupere seus arquivos. Leia-me!.txt") and places it on the desktop. The file contains a ransom-demand message.

   
Sstartbest.ru Redirect

What is sstartbest.ru?

sstartbest.ru is a fake Internet search engine identical to search4tops.com, bestsearchs.com, chromepage1.ru, and many others. Judging on appearance alone, sstartbest.ru may seem very similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, users often believe that sstartbest.ru is also legitimate. In fact, developers promote it via deceptive software download/installation set-ups designed to modify web browser settings without users' consent. Furthermore, this site continually records information relating to Internet browsing activity.

   
This User Is Disabled Scam

What is "This User Is Disabled"?

"This User Is Disabled" is a fake error displayed by an adware-type application called Power Cam. It was first discovered by Lawrence Abrams. This adware infiltrates the system during installation of other (often free) software. Following successful infiltration, Power Cam locks the computer screen and displays an error message.

Research shows that adware-type applications are also likely to gather information relating to users' Internet browsing activity and display intrusive online advertisements.

   
Windows Session Console Weather Adware

What is Windows Session Console Weather?

Windows Session Console Weather is a deceptive application designed by SoftMedia and related to Linkury (a company responsible for the development of SafeFinder browser hijacker). This app infiltrates systems during installation of other (often free) software.

Furthermore, Windows Session Console Weather continually delivers intrusive online advertisements and gathers various information relating to users' Internet browsing activity. For these reasons, Windows Session Console Weather is categorized as adware and a potentially unwanted program (PUP).

   
Vindows Ransomware

What is Vindows?

Vindows is file-encryption ransomware discovered by Jakub Kroustek. Following infiltration, this malware encrypts various stored files and appends filenames with the ".vindows" extension (for instance, "sample.jpg" is renamed to "sample.jpg.vindows"). Vindows then opens a pop-up window containing a ransom-demand message.

   
Search.webshields.org Redirect

What is search.webshields.org?

WebShields is a deceptive application that supposedly protects users' privacy during Internet browsing. These claims often trick users into believing that that WebShields is legitimate and useful, however, this app often infiltrates systems without consent.

Furthermore, WebShields stealthily modifies web browser settings and continually records information relating to Internet browsing activity. For these reasons, WebShields is categorized as a browser hijacker and a potentially unwanted program (PUP).

   
Gotowebs.com Redirect

What is gotowebs.com?

Identical to webbooks.site, gotowebs.com is a fake Internet search engine claiming to generate improved search results. On initial inspection, this site may seem legitimate and useful, however, it is promoted via rogue software downloaders/installers that hijack web browsers and stealthily modify various options.

Furthermore, gotowebs.com continually tracks users' Internet browsing activity by gathering various user/system data.

   
Ads by SavingsCool

What is SavingsCool?

SavingsCool is an updated version of MySafeSavings adware. By claiming to save time and money while helping online, SavingsCool attempts to give the impression of legitimacy. Be aware, however, that this app often infiltrates systems without users' consent.

Furthermore, it displays intrusive online advertisements and gathers various information relating to Internet browsing activity. For these reasons, SavingsCool is categorized as a potentially unwanted program (PUP) and adware.

   
Easyopenweb.com Redirect

What is easyopenweb.com?

easyopenweb.com is a deceptive website claiming to generate improved search results. Judging on appearance alone, this site barely differs from Google, Bing, Yahoo, and other similar legitimate search engines. Therefore, some users believe that easyopenweb.com is also legitimate.

In fact, developers promote this site by employing rogue software download/installation set-ups designed to hijack web browsers and stealthily modify various options. Furthermore, easyopenweb.com gathers various data relating to users' Internet browsing activity.

   
*.aesir Ransomware

What is *.aesir?

*.aesir is a new variant of Locky. Apart from minor updates, it is also virtually identical to .odin and *.thor. Developers spread this ransomware via spam emails (malicious attachments). Following infiltration, *.aesir encrypts stored files (targeting 456 file types in total) using asymmetric cryptography.

Encrypted files are renamed using the "[8_random_characters]-[4_random_characters]-[4_random_characters]-[4_random_characters]-[12_random_characters].aesir" pattern. For instance, an encrypted file could be renamed to "F76FAA31-3A55-O591-3DDO-1A32C2HN051.aesir".

Once the files are encrypted, ransomware creates three files ("-INSTRUCTION.bmp", "_1-INSTRUCTION.html", and "-INSTRUCTION.html"), placing them on the desktop and changing the desktop wallpaper.

   

Page 1991 of 2329

<< Start < Prev 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal