Virus and Spyware Removal Guides, uninstall instructions

What kind of page is pifeen[.]com?

Our researchers discovered the pifeen[.]com rogue page during a routine investigation of suspicious websites. It operates by endorsing spam browser notifications and by redirecting users to other (likely unreliable/hazardous) sites.

Most visitors to pifeen[.]com and webpages akin to it access them via redirects generated by websites that employ rogue advertising networks.

What kind of page is kilimanjarospot[.]top?

Kilimanjarospot[.]top is a rogue webpage that promotes browser notification spam and generates redirects to different (likely dubious/malicious) sites.

The majority of visitors to pages like kilimanjarospot[.]top access them via redirects caused by websites that utilize rogue advertising networks. Our researchers discovered the webpage in question while investigating sites that use such networks.

What kind of email is "You Have Pending UNSYNC Messages"?

After examining this "You Have Pending UNSYNC Messages" email, we learned that it is spam. This fake message claims that there are pending emails that did not reach the recipient's inbox. The spam mail aims to lure victims into visiting a phishing website that targets email account log-in credentials.

What is "Google Foundation's E-mail Electronic Online Sweepstakes"?

We have examined this email and learned that it is a fraudulent message, falsely claiming to be from Ms. Jacquelline Fuller, the Director of Accessibility at Google. The scammers behind this email aim to deceive recipients into believing they are eligible for a donation while attempting to steal money and (or) personal information.

What kind of page is fujivista[.]top?

We have inspected fujivista[.]top and discovered that this page is designed to receive permission to show notifications. It uses clickbait to trick visitors into permitting it to send notifications. Users should avoid visiting fujivista[.]top and similar sites to avoid exposure to online threats.

What kind of email is "Webmail - Messages Are Yet To Reach Your Mailbox"?

After inspecting this "Webmail - Messages Are Yet To Reach Your Mailbox" email, we determined that it is spam. This mail promotes a phishing scam wherein recipients are lured into visiting a fake sign-in page targeting email account log-in credentials.

It must be stressed that the information in this message is false, and this mail is not associated with any legitimate service providers or other entities.

What kind of malware is Kasper?

Kasper is ransomware, which we discovered while examining malware samples submitted to VirusTotal. Our analysis has shown that Kasper encrypts files, modifies filenames of the encrypted files, and generates a ransom note ("README kasper.txt"). It appends kasperskyrans@gmail.com email address, the victim's ID, and the ".kasper" extension to filenames.

For example, it renames "1.jpg" to "1.jpg.EMAIL=[kasperskyrans@gmail.com]ID=[A64732D5A3C93318].kasper", "2.png" to "2.png.EMAIL=[kasperskyrans@gmail.com]ID=[A64732D5A3C93318].kasper", etc. It is important to note that "kaspersky" in the email address does not indicate that the Kaspersky company is associated with the ransomware.

What is the fake "Bitcoin Airdrop From Binance"?

This fraudulent scheme is presented on a fake website posing as a legitimate Bitcoin airdrop launched by Binance. The scammers behind it aim to steal both personal information and cryptocurrency from unsuspecting individuals. Therefore, this and similar schemes should be recognized as scams and avoided.

What is the fake "Claim BOOE" site?

We have examined the platform (register-bookofeth[.]xyz) and found that it is a fraudulent page mimicking the real one (bookofeth.xyz). On the fake site, visitors are offered to claim cryptocurrency. However, the site's true intention is to lure individuals into taking action that could result in cryptocurrency theft.

What kind of malware is Muck?

Muck is an information-stealing malware primarily designed to extract sensitive data from infected devices, focusing on web browser data. This malware can cause victims serious privacy and security issues. Therefore, it should be eliminated from infected computers as soon as possible.