Virus and Spyware Removal Guides, uninstall instructions

What is KawaiiLocker?

KawaiiLocker is ransomware-type virus that stealthily infiltrates the system and encrypts various files (for example, .doc, .ppt, .php, .mp4, etc.) Unlike other ransomware, KawaiiLocker does not change names of encrypted files or append any extension to them. Therefore, it is difficult to determine which files are encrypted.

Following successful encryption, KawaiiLocker deletes file shadow volume copies by executing the "vssadmin delete shadows /for=C:\/all" command. Furthermore, KawaiiLocker creates "crypt_list.txt" (list of encrypted files) and "HOW DECRYPT FILES.txt" (ransom-demand message), placing these files on the victim's desktop.

What is GrizzlyQuiz?

Identical to QuizCrystal, GrizzlyQuiz is a deceptive application claiming to allow users to check the latest horoscopes and solve various quizzes. These claims often trick users into believing that GrizzlyQuiz is legitimate. Be aware, however, that this rogue app often infiltrates systems without users' permission.

Furthermore, it displays intrusive online advertisements and continually gathers information relating to users' web browsing activity. For these reasons, GrizzlyQuiz is classed as a potentially unwanted program (PUP) and adware.

What is search.searchglnn.com?

Get Local News Now is a deceptive application claiming to allow users to watch various news channels live, directly from the web browser. Initially, this functionality may appear legitimate and useful, however, be aware that Get Local News Now is categorized as a potentially unwanted program (PUP) and a browser hijacker.

There are four reasons for these negative associations: 1) Get Local News Now often infiltrates systems without users' permission; 2) this application continually monitors web browsing activity; 3) it stealthily modifies web browser settings, and; 4) Get Local News Now delivers intrusive online advertisements.

What is RarVault?

RarVault is a ransomware that supposedly encrypts files. Following successful infiltration, RarVault moves various files to a password-protected .rar archive stored in a "RarVault" folder, placed in the root partition (e.g., C:\, D:\, E:\, etc.). After "encrypting" victim's files, RarVault creates an htm file ("RarVault.htm") and places it on the desktop. This file redirects victims to RarVault's website, which contains a ransom-demand message.

What is RansomCuck?

RansomCuck is a ransomware-type virus identical to Nullbyte. Once infiltrated, RansomCuck encrypts files using asymmetric encryption. During encryption, RansomCuck appends names of encrypted files with the ".encrypt" extension (e.g., encrypted "sample.jpg" is renamed to "sample.jpg.encrypt").

Thus, it is easy to determine which files are encrypted. Following successful encryption, RansomCuck opens a pop-up window and creates a text file ("RansomCuck.txt"), which is placed on the desktop. Both contain an identical ransom-demand message.

What is QuizCrystal?

Developers present QuizCrystal as a legitimate application that supposedly provides access to the latest horoscopes, various quizzes, and other similar features. These claims often trick users into believing that QuizCrystal is a legitimate and useful app, however, it is classed as a potentially unwanted program (PUP) and adware.

One of the main reasons for these negative associations is stealth installation - QuizCrystal often infiltrates systems without users' consent. Furthermore, this PUP gathers various information and continually delivers intrusive online advertisements.

What is SultanArcade?

SultanArcade is a deceptive application identical to ArcadeLoot, ArcadeCookie, GamesZing, and a number of other rogue apps. By falsely claiming to provide access to addictive Flash games, SultanArcade attempts to trick users into believing that it is a legitimate application, however, this app often infiltrates systems without users' permission.

Furthermore, it continually delivers intrusive online advertisements and records information relating to web browsing activity. For these reasons, SultanArcade is categorized as adware and a potentially unwanted program (PUP).

What is ArcadeBayou?

ArcadeBayou is a deceptive application that falsely claims to provides users with access to various addictive Flash games. Initially, this functionality may appear legitimate and useful, however, ArcadeBayou is classed as a potentially unwanted program (PUP) and adware.

There are three main reasons for these negative associations: 1) stealth installation without consent; 2) tracking of Internet browsing activity, and; 3) display of intrusive online advertisements.

What is Dealbeaver?

Dealbeaver is a potentially unwanted program (PUP) that supposedly saves time and money by providing notifications of special deals/discounts available on various online stores, providing coupons, and enabling other 'useful' features.

These claims often trick users to install, however, Dealbeaver often infiltrates systems without direct user permission. Furthermore, this app tracks users' web browsing activity and continually delivers intrusive online advertisements. For these reasons, Dealbeaver is classed as adware.

What kind of malware is Flyper?

Flyper is ransomware-type virus that encrypts various files stored on the system. During encryption, Flyper appends names of encrypted files with the ".flyper" (or ".locked") extension (for example, "sample.jpg" is renamed to "sample.jpg.flyper").

Following successful encryption, Flyper changes the desktop and creates an "instruction.txt" (or "Read_Me.txt") file, which contains a ransom-demand message.